Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service). This vulnerability affects Firefox < 71.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nspr-develUpgrade nspr | May 4, 2022 | Jan 8, 2020 |
| Amazon Linux Ami 2 | — | Upgrade nss-sysinitUpgrade nssUpgrade nss-debuginfoUpgrade nss-util-develUpgrade nss-toolsUpgrade nss-util-debuginfoUpgrade nspr-develUpgrade nss-softokn-develUpgrade nsprUpgrade nss-softokn-debuginfoUpgrade nss-utilUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nss-softoknUpgrade nspr-debuginfoUpgrade nss-softokn-freeblUpgrade nss-softokn-freebl-devel | Nov 12, 2020 | Jan 8, 2020 |
| Amazon_linux | — | Upgrade nss-utilUpgrade nss-softoknUpgrade nspr | Jul 13, 2021 | Dec 9, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 8, 2020 |
| Centos_linux | — | Upgrade nss-sysinitUpgrade nss-utilUpgrade nsprUpgrade nss-toolsUpgrade nss-softokn-freeblUpgrade nspr-develUpgrade nss-softokn-develUpgrade nss-tools-debuginfoUpgrade nss-debuginfoUpgrade nssUpgrade nss-softokn-debuginfoUpgrade nss-util-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nss-debugsourceUpgrade nss-softoknUpgrade nss-util-develUpgrade nss-sysinit-debuginfoUpgrade nspr-debugsourceUpgrade nss-develUpgrade nss-softokn-freebl-develUpgrade nss-pkcs11-develUpgrade nspr-debuginfo | Aug 4, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade nss-utilUpgrade nss-softoknUpgrade nss | Jun 16, 2022 | Jan 8, 2020 |
| Mfsa2019 36 | — | Upgrade to Mozilla Firefox version 71.0 | Dec 4, 2019 | Dec 3, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade library/security/nss to version 4.51-11.4.24.0.1.75.1 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.12.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade mail/thunderbird to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jan 8, 2020 |
| Oracle_linux | — | Upgrade nss-pkcs11-develUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-utilUpgrade nss-develUpgrade nss-softokn-freebl-develUpgrade nspr-develUpgrade nssUpgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nsprUpgrade nss-toolsUpgrade nss-softokn | Aug 5, 2020 | Dec 10, 2019 |
| Redhat_linux | — | Upgrade nss-softokn-freebl-develUpgrade nss-debugsourceUpgrade nss-pkcs11-develUpgrade nss-softokn-debuginfoUpgrade nspr-debuginfoUpgrade nspr-debugsourceUpgrade nssUpgrade nss-sysinit-debuginfoUpgrade nss-softoknUpgrade nss-softokn-freeblUpgrade nss-tools-debuginfoUpgrade nsprUpgrade nss-softokn-develUpgrade nss-utilUpgrade nss-develUpgrade nss-util-develNo solution existsUpgrade nspr-develUpgrade nss-sysinitUpgrade nss-util-debuginfoUpgrade nss-toolsUpgrade nss-softokn-freebl-debuginfoUpgrade nss-debuginfo | Aug 4, 2020 | Jan 8, 2020 |
| Rocky_linux | — | Upgrade nsprUpgrade nspr-develUpgrade nspr-debugsourceUpgrade nspr-debuginfo | Mar 12, 2024 | Jan 8, 2020 |
| Ubuntu | — | Upgrade firefox | Dec 10, 2019 | Dec 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub