The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade firefox-esrUpgrade linux-firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade waterfoxUpgrade firefoxUpgrade libxul | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-libffi7Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-libffi4Upgrade mozillafirefox-branding-upstreamUpgrade MozillaThunderbird-buildsymbolsUpgrade libfirefox-glib-2_0-0Upgrade libfirefox-gmodule-2_0-0Upgrade libfirefox-gio-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nssUpgrade firefox-glib2-toolsUpgrade mozillafirefox-branding-sleUpgrade libfreebl3-32bitUpgrade firefox-atk-langUpgrade mozilla-nss-certs-32bitUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozillafirefox-buildsymbolsUpgrade firefox-gio-branding-upstreamUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gdk-pixbuf-langUpgrade firefox-libcairo-gobject2Upgrade firefox-libpango-1_0-0Upgrade MozillaFirefoxUpgrade libfirefox-gobject-2_0-0Upgrade mozilla-nss-32bitUpgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nss-certsUpgrade mozilla-nspr-32bitUpgrade mozilla-nsprUpgrade libfreebl3Upgrade firefox-gtk3-langUpgrade firefox-libharfbuzz0Upgrade enigmailUpgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-dataUpgrade MozillaThunderbird-translations-otherUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-gthread-2_0-0Upgrade MozillaThunderbird-translations-commonUpgrade firefox-glib2-langUpgrade firefox-gtk3-toolsUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-libatk-1_0-0Upgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade firefox-libcairo2Upgrade libsoftokn3Upgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodule-vietnameseUpgrade MozillaThunderbirdUpgrade firefox-libgtk-3-0Upgrade mozilla-nss-devel | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub