The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade seamonkeyUpgrade linux-firefoxUpgrade waterfoxUpgrade thunderbirdUpgrade firefoxUpgrade libxulUpgrade firefox-esrUpgrade linux-thunderbird | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nssUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-libffi7Upgrade MozillaFirefox-branding-SLEDUpgrade mozillafirefox-buildsymbolsUpgrade mozillafirefox-branding-upstreamUpgrade libfreebl3-32bitUpgrade firefox-libpango-1_0-0Upgrade libsoftokn3-32bitUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-libcairo-gobject2Upgrade libfirefox-gio-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade firefox-gdk-pixbuf-langUpgrade mozilla-nspr-32bitUpgrade firefox-glib2-toolsUpgrade firefox-atk-langUpgrade mozillafirefox-branding-sleUpgrade mozilla-nsprUpgrade libfreebl3Upgrade mozilla-nss-certsUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nss-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfirefox-gmodule-2_0-0Upgrade libfirefox-glib-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libffi4Upgrade MozillaFirefoxUpgrade libfirefox-gobject-2_0-0Upgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libgtk-3-0Upgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-develUpgrade firefox-gtk3-dataUpgrade mozilla-nss-develUpgrade firefox-libcairo2Upgrade mozilla-nss-toolsUpgrade firefox-libharfbuzz0Upgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-otherUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-glib2-langUpgrade libfirefox-gthread-2_0-0Upgrade enigmailUpgrade MozillaThunderbird-translations-commonUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-langUpgrade libsoftokn3Upgrade mozilla-nspr-develUpgrade firefox-gtk3-toolsUpgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-immodule-amharic | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub