Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-2738

Fixed in a distro release EPSS 3%

The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.

Published 2015-07-06 · CVE record · OSV

Products: canonical ubuntu_linux, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, suse_linux_enterprise_server, debian_linux, mozilla firefox, mozilla firefox_esr, mozilla thunderbird, oracle solaris

Distro releases

ReleasePackageFixed in
Debian 7icedove31.8.0-1~deb7u1
Debian 7iceweasel31.8.0esr-1~deb7u1
Debian 8icedove31.8.0-1~deb8u1
Debian 8iceweasel31.8.0esr-1~deb8u1
Red Hat Enterprise Linux 5firefox0:38.1.0-1.el5_11
Red Hat Enterprise Linux 5firefox-debuginfo0:38.1.0-1.el5_11
Red Hat Enterprise Linux 5thunderbird0:31.8.0-1.el5_11
Red Hat Enterprise Linux 5thunderbird-debuginfo0:31.8.0-1.el5_11
Red Hat Enterprise Linux 6firefox0:38.1.0-1.el6_6
Red Hat Enterprise Linux 6firefox-debuginfo0:38.1.0-1.el6_6
Red Hat Enterprise Linux 6thunderbird0:31.8.0-1.el6_6
Red Hat Enterprise Linux 6thunderbird-debuginfo0:31.8.0-1.el6_6
Red Hat Enterprise Linux 7firefox0:38.1.0-1.el7_1
Red Hat Enterprise Linux 7firefox-debuginfo0:38.1.0-1.el7_1
Red Hat Enterprise Linux 7thunderbird0:31.8.0-1.el7_1
Red Hat Enterprise Linux 7thunderbird0:31.8.0-1.ael7b_1
Red Hat Enterprise Linux 7thunderbird-debuginfo0:31.8.0-1.ael7b_1
Red Hat Enterprise Linux 7thunderbird-debuginfo0:31.8.0-1.el7_1
Red Hat rhel productivity 5thunderbird0:31.8.0-1.el5_11
Red Hat rhel productivity 5thunderbird-debuginfo0:31.8.0-1.el5_11
SUSE Linux Enterprise Desktop 11 SP3MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Desktop 11 SP3mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Desktop 11 SP3mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Desktop 11 SP4MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Desktop 11 SP4mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Desktop 11 SP4mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Desktop 12MozillaFirefox31.8.0esr-37.3
SUSE Linux Enterprise Desktop 12mozilla-nspr4.10.8-3.1
SUSE Linux Enterprise Desktop 12mozilla-nss3.19.2_CKBI_1.98-21.1
SUSE Linux Enterprise Server 11 SP1-LTSSMozillaFirefox38.2.0esr-10.1
SUSE Linux Enterprise Server 11 SP1-LTSSMozillaFirefox-branding-SLED31.0-0.5.7.11
SUSE Linux Enterprise Server 11 SP1-LTSSfirefox-gcc474.7.2_20130108-0.37.2
SUSE Linux Enterprise Server 11 SP1-LTSSmozilla-nss3.19.2.0-0.7.1
SUSE Linux Enterprise Server 11 SP1-TERADATAMozillaFirefox38.2.0esr-10.1
SUSE Linux Enterprise Server 11 SP1-TERADATAMozillaFirefox-branding-SLED31.0-0.5.7.11
SUSE Linux Enterprise Server 11 SP1-TERADATAfirefox-gcc474.7.2_20130108-0.37.2
SUSE Linux Enterprise Server 11 SP1-TERADATAmozilla-nss3.19.2.0-0.7.1
SUSE Linux Enterprise Server 11 SP2-LTSSMozillaFirefox38.2.0esr-10.1
SUSE Linux Enterprise Server 11 SP2-LTSSMozillaFirefox-branding-SLED31.0-0.5.7.11
SUSE Linux Enterprise Server 11 SP2-LTSSfirefox-gcc474.7.2_20130108-0.37.2
SUSE Linux Enterprise Server 11 SP2-LTSSmozilla-nss3.19.2.0-0.7.1
SUSE Linux Enterprise Server 11 SP3MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server 11 SP3mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server 11 SP3mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server 11 SP3-TERADATAMozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server 11 SP3-TERADATAmozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server 11 SP3-TERADATAmozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server 11 SP4MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server 11 SP4mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server 11 SP4mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server 12MozillaFirefox31.8.0esr-37.3
SUSE Linux Enterprise Server 12mozilla-nspr4.10.8-3.1
SUSE Linux Enterprise Server 12mozilla-nss3.19.2_CKBI_1.98-21.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server for SAP Applications 12MozillaFirefox31.8.0esr-37.3
SUSE Linux Enterprise Server for SAP Applications 12mozilla-nspr4.10.8-3.1
SUSE Linux Enterprise Server for SAP Applications 12mozilla-nss3.19.2_CKBI_1.98-21.1
SUSE Linux Enterprise Software Development Kit 11 SP3MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Software Development Kit 11 SP3mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Software Development Kit 11 SP3mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Software Development Kit 11 SP4MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Software Development Kit 11 SP4mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Software Development Kit 11 SP4mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Software Development Kit 12MozillaFirefox31.8.0esr-37.3
SUSE Linux Enterprise Software Development Kit 12mozilla-nspr4.10.8-3.1
SUSE Linux Enterprise Software Development Kit 12mozilla-nss3.19.2_CKBI_1.98-21.1
Ubuntu 14.04 LTSfirefox39.0+build5-0ubuntu0.14.04.1
Ubuntu 14.04 LTSthunderbird1:31.8.0+build1-0ubuntu0.14.04.1
openSUSE TumbleweedMozillaFirefox50.1.0-1.1
openSUSE TumbleweedMozillaThunderbird45.5.1-1.1
openSUSE Tumbleweedfirefox-esr128.5.1-1.1