Bug 717158 (CVE-2020-6801, CVE-2020-6815, MFSA-2020-08)

Summary:	<www-client/firefox-74.0: Multiple vulnerability (CVE-2020-{6801,6815})
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	trivial	CC:	mozilla
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=712182
Whiteboard:	~2 [noglsa cve]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2020-04-11 23:33:30 UTC

CVE-2020-6815 (https://nvd.nist.gov/vuln/detail/CVE-2020-6815):
  Mozilla developers reported memory safety and script safety bugs present in
  Firefox 73. Some of these bugs showed evidence of memory corruption or
  escalation of privilege and we presume that with enough effort some of these
  could have been exploited to run arbitrary code. This vulnerability affects
  Firefox < 74.

CVE-2020-6801 (https://nvd.nist.gov/vuln/detail/CVE-2020-6801):
  Mozilla developers reported memory safety bugs present in Firefox 72. Some
  of these bugs showed evidence of memory corruption and we presume that with
  enough effort some of these could have been exploited to run arbitrary code.
  This vulnerability affects Firefox < 73.

Comment 1 Yury German Gentoo Infrastructure

2020-04-11 23:36:01 UTC

Both versions not in Tree
closing