CVE-2020-6807Use After Free in Mozilla Firefox

CWE-416Use After Free16 documents9 sources
Severity
8.8HIGHNVD
OSV6.5
EPSS
0.8%
top 26.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 25
Latest updateMay 24

Description

When a device was changed while a stream was about to be destroyed, the stream-reinit task may have been executed after the stream was destroyed, causing a use-after-free and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages9 packages

CVEListV5mozilla/firefoxunspecified74+1
NVDmozilla/firefox< 74.0
CVEListV5mozilla/firefox_esrunspecified68.6
NVDmozilla/firefox_esr< 68.6.0
Ubuntumozilla/firefox< 74.0+build3-0ubuntu0.16.04.1+1

Also affects: Ubuntu Linux 16.04, 18.04, 19.10

🔴Vulnerability Details

6
GHSA
GHSA-v7mh-jh5r-f65h: When a device was changed while a stream was about to be destroyed, the stream-reinit task may have been executed after the stream was destroyed, caus2022-05-24
OSV
thunderbird vulnerabilities2020-04-21
OSV
thunderbird vulnerabilities2020-04-13
CVEList
CVE-2020-6807: When a device was changed while a stream was about to be destroyed, the stream-reinit task may have been executed after the stream was destroyed, caus2020-03-25
OSV
CVE-2020-6807: When a device was changed while a stream was about to be destroyed, the stream-reinit task may have been executed after the stream was destroyed, caus2020-03-25

📋Vendor Advisories

8
Ubuntu
Thunderbird vulnerabilities2020-04-21
Ubuntu
Thunderbird vulnerabilities2020-04-13
Ubuntu
Firefox vulnerabilities2020-03-11
Red Hat
Mozilla: Use-after-free in cubeb during stream destruction2020-03-10
Debian
CVE-2020-6807: firefox - When a device was changed while a stream was about to be destroyed, the <code>st...2020

💬Community

1
Bugzilla
CVE-2020-6807 Mozilla: Use-after-free in cubeb during stream destruction2020-03-10
CVE-2020-6807 — Use After Free in Mozilla Firefox | cvebase