Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service). This vulnerability affects Firefox < 71.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nspr-develUpgrade nspr | May 4, 2022 | Jan 8, 2020 |
| Amazon Linux Ami 2 | — | Upgrade nssUpgrade nss-toolsUpgrade nss-util-develUpgrade nss-debuginfoUpgrade nss-util-debuginfoUpgrade nss-sysinitUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nss-softokn-develUpgrade nspr-develUpgrade nss-softokn-debuginfoUpgrade nspr-debuginfoUpgrade nss-softokn-freeblUpgrade nss-softoknUpgrade nsprUpgrade nss-utilUpgrade nss-pkcs11-devel | Nov 12, 2020 | Jan 8, 2020 |
| Amazon_linux | — | Upgrade nss-softoknUpgrade nsprUpgrade nss-util | Jul 13, 2021 | Dec 9, 2019 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 8, 2020 | |
| Centos_linux | — | Upgrade nss-softokn-freebl-develUpgrade nss-softoknUpgrade nss-sysinit-debuginfoUpgrade nss-develUpgrade nss-debugsourceUpgrade nss-util-develUpgrade nss-softokn-freebl-debuginfoUpgrade nspr-debugsourceUpgrade nss-pkcs11-develUpgrade nspr-debuginfoUpgrade nss-utilUpgrade nss-sysinitUpgrade nsprUpgrade nss-tools-debuginfoUpgrade nss-softokn-debuginfoUpgrade nssUpgrade nss-debuginfoUpgrade nss-util-debuginfoUpgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nss-toolsUpgrade nspr-devel | Aug 4, 2020 | Jan 8, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade nss-utilUpgrade nssUpgrade nss-softokn | Jun 16, 2022 | Jan 8, 2020 |
| Mfsa2019 36 | — | Upgrade to Mozilla Firefox version 71.0 | Dec 4, 2019 | Dec 3, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade library/security/nss to version 4.51-11.4.24.0.1.75.1 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.12.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade mail/thunderbird to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jan 8, 2020 |
| Oracle_linux | — | Upgrade nss-sysinitUpgrade nss-pkcs11-develUpgrade nss-util-develUpgrade nss-softokn-freebl-develUpgrade nss-utilUpgrade nss-develUpgrade nsprUpgrade nss-toolsUpgrade nspr-develUpgrade nss-softoknUpgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nss | Aug 5, 2020 | Dec 10, 2019 |
| Redhat_linux | — | Upgrade nss-softokn-freebl-develUpgrade nss-pkcs11-develUpgrade nss-sysinit-debuginfoUpgrade nss-debugsourceUpgrade nspr-debugsourceUpgrade nssUpgrade nspr-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-develUpgrade nss-softokn-develUpgrade nss-sysinitUpgrade nss-softokn-freebl-debuginfoUpgrade nss-toolsUpgrade nspr-develUpgrade nss-tools-debuginfoUpgrade nss-util-develNo solution existsUpgrade nss-debuginfoUpgrade nss-softoknUpgrade nss-util-debuginfoUpgrade nss-utilUpgrade nsprUpgrade nss-softokn-freebl | Aug 4, 2020 | Jan 8, 2020 |
| Rocky_linux | rocky-upgrade-nsprrocky-upgrade-nspr-debuginforocky-upgrade-nspr-debugsourcerocky-upgrade-nspr-devel | Mar 12, 2024 | Jan 8, 2020 | |
| Ubuntu | ubuntu-upgrade-firefox | Dec 10, 2019 | Dec 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub