Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-2740

Fixed in a distro release EPSS 6%

Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors.

Published 2015-07-06 · CVE record · OSV

Products: mozilla thunderbird, mozilla firefox, mozilla firefox_esr, novell suse_linux_enterprise_software_development_kit, canonical ubuntu_linux, debian_linux, novell suse_linux_enterprise_desktop, novell suse_linux_enterprise_server, oracle solaris

Distro releases

ReleasePackageFixed in
Debian 7icedove31.8.0-1~deb7u1
Debian 7iceweasel31.8.0esr-1~deb7u1
Debian 8icedove31.8.0-1~deb8u1
Debian 8iceweasel31.8.0esr-1~deb8u1
Red Hat Enterprise Linux 5firefox0:38.1.0-1.el5_11
Red Hat Enterprise Linux 5firefox-debuginfo0:38.1.0-1.el5_11
Red Hat Enterprise Linux 5thunderbird0:31.8.0-1.el5_11
Red Hat Enterprise Linux 5thunderbird-debuginfo0:31.8.0-1.el5_11
Red Hat Enterprise Linux 6firefox0:38.1.0-1.el6_6
Red Hat Enterprise Linux 6firefox-debuginfo0:38.1.0-1.el6_6
Red Hat Enterprise Linux 6thunderbird0:31.8.0-1.el6_6
Red Hat Enterprise Linux 6thunderbird-debuginfo0:31.8.0-1.el6_6
Red Hat Enterprise Linux 7firefox0:38.1.0-1.el7_1
Red Hat Enterprise Linux 7firefox-debuginfo0:38.1.0-1.el7_1
Red Hat Enterprise Linux 7thunderbird0:31.8.0-1.ael7b_1
Red Hat Enterprise Linux 7thunderbird0:31.8.0-1.el7_1
Red Hat Enterprise Linux 7thunderbird-debuginfo0:31.8.0-1.ael7b_1
Red Hat Enterprise Linux 7thunderbird-debuginfo0:31.8.0-1.el7_1
Red Hat rhel productivity 5thunderbird0:31.8.0-1.el5_11
Red Hat rhel productivity 5thunderbird-debuginfo0:31.8.0-1.el5_11
SUSE Linux Enterprise Desktop 11 SP3MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Desktop 11 SP3mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Desktop 11 SP3mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Desktop 11 SP4MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Desktop 11 SP4mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Desktop 11 SP4mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Desktop 12MozillaFirefox31.8.0esr-37.3
SUSE Linux Enterprise Desktop 12mozilla-nspr4.10.8-3.1
SUSE Linux Enterprise Desktop 12mozilla-nss3.19.2_CKBI_1.98-21.1
SUSE Linux Enterprise Server 11 SP1-LTSSMozillaFirefox38.2.0esr-10.1
SUSE Linux Enterprise Server 11 SP1-LTSSMozillaFirefox-branding-SLED31.0-0.5.7.11
SUSE Linux Enterprise Server 11 SP1-LTSSfirefox-gcc474.7.2_20130108-0.37.2
SUSE Linux Enterprise Server 11 SP1-LTSSmozilla-nss3.19.2.0-0.7.1
SUSE Linux Enterprise Server 11 SP1-TERADATAMozillaFirefox38.2.0esr-10.1
SUSE Linux Enterprise Server 11 SP1-TERADATAMozillaFirefox-branding-SLED31.0-0.5.7.11
SUSE Linux Enterprise Server 11 SP1-TERADATAfirefox-gcc474.7.2_20130108-0.37.2
SUSE Linux Enterprise Server 11 SP1-TERADATAmozilla-nss3.19.2.0-0.7.1
SUSE Linux Enterprise Server 11 SP2-LTSSMozillaFirefox38.2.0esr-10.1
SUSE Linux Enterprise Server 11 SP2-LTSSMozillaFirefox-branding-SLED31.0-0.5.7.11
SUSE Linux Enterprise Server 11 SP2-LTSSfirefox-gcc474.7.2_20130108-0.37.2
SUSE Linux Enterprise Server 11 SP2-LTSSmozilla-nss3.19.2.0-0.7.1
SUSE Linux Enterprise Server 11 SP3MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server 11 SP3mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server 11 SP3mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server 11 SP3-TERADATAMozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server 11 SP3-TERADATAmozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server 11 SP3-TERADATAmozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server 11 SP4MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server 11 SP4mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server 11 SP4mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server 12MozillaFirefox31.8.0esr-37.3
SUSE Linux Enterprise Server 12mozilla-nspr4.10.8-3.1
SUSE Linux Enterprise Server 12mozilla-nss3.19.2_CKBI_1.98-21.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Server for SAP Applications 12MozillaFirefox31.8.0esr-37.3
SUSE Linux Enterprise Server for SAP Applications 12mozilla-nspr4.10.8-3.1
SUSE Linux Enterprise Server for SAP Applications 12mozilla-nss3.19.2_CKBI_1.98-21.1
SUSE Linux Enterprise Software Development Kit 11 SP3MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Software Development Kit 11 SP3mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Software Development Kit 11 SP3mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Software Development Kit 11 SP4MozillaFirefox31.8.0esr-0.10.1
SUSE Linux Enterprise Software Development Kit 11 SP4mozilla-nspr4.10.8-0.5.1
SUSE Linux Enterprise Software Development Kit 11 SP4mozilla-nss3.19.2_CKBI_1.98-0.10.1
SUSE Linux Enterprise Software Development Kit 12MozillaFirefox31.8.0esr-37.3
SUSE Linux Enterprise Software Development Kit 12mozilla-nspr4.10.8-3.1
SUSE Linux Enterprise Software Development Kit 12mozilla-nss3.19.2_CKBI_1.98-21.1
Ubuntu 14.04 LTSfirefox39.0+build5-0ubuntu0.14.04.1
Ubuntu 14.04 LTSthunderbird1:31.8.0+build1-0ubuntu0.14.04.1
openSUSE TumbleweedMozillaFirefox50.1.0-1.1
openSUSE TumbleweedMozillaThunderbird45.5.1-1.1