Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service). This vulnerability affects Firefox < 71.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nsprUpgrade nspr-devel | May 4, 2022 | Jan 8, 2020 |
| Amazon Linux Ami 2 | — | Upgrade nss-sysinitUpgrade nss-debuginfoUpgrade nss-util-debuginfoUpgrade nss-toolsUpgrade nssUpgrade nss-util-develUpgrade nss-softokn-debuginfoUpgrade nspr-develUpgrade nss-utilUpgrade nsprUpgrade nss-softokn-freebl-develUpgrade nss-pkcs11-develUpgrade nss-softokn-develUpgrade nss-develUpgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nspr-debuginfo | Nov 12, 2020 | Jan 8, 2020 |
| Amazon_linux | — | Upgrade nsprUpgrade nss-softoknUpgrade nss-util | Jul 13, 2021 | Dec 9, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 8, 2020 |
| Centos_linux | — | Upgrade nss-develUpgrade nspr-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-freebl-develUpgrade nspr-debugsourceUpgrade nss-util-develUpgrade nss-pkcs11-develUpgrade nss-debugsourceUpgrade nss-sysinit-debuginfoUpgrade nss-softoknUpgrade nss-softokn-develUpgrade nss-utilUpgrade nsprUpgrade nss-toolsUpgrade nss-debuginfoUpgrade nss-sysinitUpgrade nss-softokn-freeblUpgrade nss-tools-debuginfoUpgrade nspr-develUpgrade nssUpgrade nss-util-debuginfoUpgrade nss-softokn-debuginfo | Aug 4, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade nssUpgrade nss-utilUpgrade nss-softokn | Jun 16, 2022 | Jan 8, 2020 |
| Mfsa2019 36 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 71.0 | Dec 4, 2019 | Dec 3, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.12.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/browser/firefox to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade library/security/nss to version 4.51-11.4.24.0.1.75.1 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade mail/thunderbird to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jan 8, 2020 |
| Oracle_linux | — | Upgrade nss-softoknUpgrade nspr-develUpgrade nssUpgrade nsprUpgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nss-toolsUpgrade nss-develUpgrade nss-util-develUpgrade nss-pkcs11-develUpgrade nss-sysinitUpgrade nss-softokn-freebl-develUpgrade nss-util | Aug 5, 2020 | Dec 10, 2019 |
| Redhat_linux | — | Upgrade nss-softokn-freebl-develUpgrade nssUpgrade nss-pkcs11-develUpgrade nss-sysinit-debuginfoUpgrade nss-debugsourceUpgrade nspr-debuginfoUpgrade nspr-debugsourceUpgrade nss-softokn-debuginfoUpgrade nspr-develNo solution existsUpgrade nss-util-debuginfoUpgrade nss-debuginfoUpgrade nss-util-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-toolsUpgrade nss-sysinitUpgrade nss-softoknUpgrade nsprUpgrade nss-develUpgrade nss-utilUpgrade nss-tools-debuginfoUpgrade nss-softokn-freeblUpgrade nss-softokn-devel | Aug 4, 2020 | Jan 8, 2020 |
| Rocky_linux | — | Upgrade nspr-debugsourceUpgrade nspr-debuginfoUpgrade nspr-develUpgrade nspr | Mar 12, 2024 | Jan 8, 2020 |
| Ubuntu | — | Upgrade firefox | Dec 10, 2019 | Dec 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub