vulnerability

Gentoo Linux: CVE-2020-26961: Mozilla Firefox: Multiple vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

Dec 7, 2020

Added

Dec 7, 2020

Modified

Mar 31, 2026

Description

When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver. However when an IPv4 address was mapped through IPv6, these addresses were erroneously let through, leading to a potential DNS Rebinding attack. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

Solutions

gentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bingentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin

References

CVE-2020-26961
https://attackerkb.com/topics/CVE-2020-26961
EUVD-EUVD-2020-19485
GENTOO-202012-03
GENTOO-202012-04
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-19485

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report