The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4241-1 advisory.

    Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially     crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of     service, conduct cross-site scripting (XSS) attacks, or execute arbitrary code. (CVE-2019-17005,     CVE-2019-17008, CVE-2019-17010, CVE-2019-17011, CVE-2019-17012, CVE-2019-17016, CVE-2019-17017,     CVE-2019-17022, CVE-2019-17024, CVE-2019-17026)

    It was discovered that NSS incorrectly handled certain memory operations. A remote attacker could     potentially exploit this to cause a denial of service, or execute arbitrary code. (CVE-2019-11745)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:4195 advisory.

  - Mozilla: Buffer overflow in plain text serializer (CVE-2019-17005)

  - Mozilla: Use-after-free in worker destruction (CVE-2019-17008)

  - Mozilla: Use-after-free when performing device orientation checks (CVE-2019-17010)

  - Mozilla: Use-after-free when retrieving a document in antitracking (CVE-2019-17011)

  - Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3 (CVE-2019-17012)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-4404:04 advisory.

    * Mozilla: Use-after-free in worker destruction (CVE-2019-17008)
      * Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3 (CVE-2019-17012)
      * Mozilla: Buffer overflow in plain text serializer (CVE-2019-17005)
      * Mozilla: Use-after-free when performing device orientation checks (CVE-2019-17010)
      * Mozilla: Use-after-free when retrieving a document in antitracking (CVE-2019-17011)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4205 advisory.

    [68.3.0-3.0.1]
    - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

    [68.3.0-3]
    - Update to 68.3.0 build2

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4108 advisory.

    - Added fix for mozbz#1348168/CVE-2017-5428

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4216-2 advisory.

    USN-4216-1 fixed vulnerabilities in Firefox. This update provides the corresponding update for Ubuntu     16.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
133040	Ubuntu 18.04 LTS : Thunderbird vulnerabilities (USN-4241-1)	Nessus	Ubuntu Local Security Checks	2020/1/17	2024/8/27	high
145636	CentOS 8 : thunderbird (CESA-2019:4195)	Nessus	CentOS Local Security Checks	2021/1/29	2024/1/25	high
289077	MiracleLinux 4 : thunderbird-68.3.0-3.AXS4 (AXSA:2019-4404:04)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
180656	Oracle Linux 6 : thunderbird (ELSA-2019-4205)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/22	high
180734	Oracle Linux 6 : firefox (ELSA-2019-4108)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/22	high
183555	Ubuntu 16.04 LTS : Firefox vulnerabilities (USN-4216-2)	Nessus	Ubuntu Local Security Checks	2023/10/20	2024/10/29	high

検出

プラグインの検索

high

high

high

high

high

high