• Все разделы
  • Статьи
  • Медиа
  • Новости
  • Нормативные материалы
  • Конференции
  • Глоссарий

DSA-3805-1 firefox-esr -- обновление безопасности

Главная Специалистам База уязвимостей DSA-3805-1 firefox-esr -- обновление безопасности

Карточка уязвимости

Характеристики уязвимости

Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
firefox-esr (any) firefox-esr-dbg (any) firefox-esr-dev (any) firefox-esr-l10n-ach (any) firefox-esr-l10n-af (any) firefox-esr-l10n-all (any) firefox-esr-l10n-an (any) firefox-esr-l10n-ar (any) firefox-esr-l10n-as (any) firefox-esr-l10n-ast (any) firefox-esr-l10n-az (any) firefox-esr-l10n-be (any) firefox-esr-l10n-bg (any) firefox-esr-l10n-bn-bd (any) firefox-esr-l10n-bn-in (any) firefox-esr-l10n-br (any) firefox-esr-l10n-bs (any) firefox-esr-l10n-ca (any) firefox-esr-l10n-cs (any) firefox-esr-l10n-cy (any) firefox-esr-l10n-da (any) firefox-esr-l10n-de (any) firefox-esr-l10n-dsb (any) firefox-esr-l10n-el (any) firefox-esr-l10n-en-gb (any) firefox-esr-l10n-en-za (any) firefox-esr-l10n-eo (any) firefox-esr-l10n-es-ar (any) firefox-esr-l10n-es-cl (any) firefox-esr-l10n-es-es (any) firefox-esr-l10n-es-mx (any) firefox-esr-l10n-et (any) firefox-esr-l10n-eu (any) firefox-esr-l10n-fa (any) firefox-esr-l10n-ff (any) firefox-esr-l10n-fi (any) firefox-esr-l10n-fr (any) firefox-esr-l10n-fy-nl (any) firefox-esr-l10n-ga-ie (any) firefox-esr-l10n-gd (any) firefox-esr-l10n-gl (any) firefox-esr-l10n-gn (any) firefox-esr-l10n-gu-in (any) firefox-esr-l10n-he (any) firefox-esr-l10n-hi-in (any) firefox-esr-l10n-hr (any) firefox-esr-l10n-hsb (any) firefox-esr-l10n-hu (any) firefox-esr-l10n-hy-am (any) firefox-esr-l10n-id (any) firefox-esr-l10n-is (any) firefox-esr-l10n-it (any) firefox-esr-l10n-ja (any) firefox-esr-l10n-kk (any) firefox-esr-l10n-km (any) firefox-esr-l10n-kn (any) firefox-esr-l10n-ko (any) firefox-esr-l10n-lij (any) firefox-esr-l10n-lt (any) firefox-esr-l10n-lv (any) firefox-esr-l10n-mai (any) firefox-esr-l10n-mk (any) firefox-esr-l10n-ml (any) firefox-esr-l10n-mr (any) firefox-esr-l10n-ms (any) firefox-esr-l10n-nb-no (any) firefox-esr-l10n-nl (any) firefox-esr-l10n-nn-no (any) firefox-esr-l10n-or (any) firefox-esr-l10n-pa-in (any) firefox-esr-l10n-pl (any) firefox-esr-l10n-pt-br (any) firefox-esr-l10n-pt-pt (any) firefox-esr-l10n-rm (any) firefox-esr-l10n-ro (any) firefox-esr-l10n-ru (any) firefox-esr-l10n-si (any) firefox-esr-l10n-sk (any) firefox-esr-l10n-sl (any) firefox-esr-l10n-son (any) firefox-esr-l10n-sq (any) firefox-esr-l10n-sr (any) firefox-esr-l10n-sv-se (any) firefox-esr-l10n-ta (any) firefox-esr-l10n-te (any) firefox-esr-l10n-th (any) firefox-esr-l10n-tr (any) firefox-esr-l10n-uk (any) firefox-esr-l10n-uz (any) firefox-esr-l10n-vi (any) firefox-esr-l10n-xh (any) firefox-esr-l10n-zh-cn (any) firefox-esr-l10n-zh-tw (any) iceweasel (any) iceweasel-dbg (any) iceweasel-dev (any) iceweasel-l10n-ach (any) iceweasel-l10n-af (any) iceweasel-l10n-all (any) iceweasel-l10n-an (any) iceweasel-l10n-ar (any) iceweasel-l10n-as (any) iceweasel-l10n-ast (any) iceweasel-l10n-az (any) iceweasel-l10n-be (any) iceweasel-l10n-bg (any) iceweasel-l10n-bn-bd (any) iceweasel-l10n-bn-in (any) iceweasel-l10n-br (any) iceweasel-l10n-bs (any) iceweasel-l10n-ca (any) iceweasel-l10n-cs (any) iceweasel-l10n-cy (any) iceweasel-l10n-da (any) iceweasel-l10n-de (any) iceweasel-l10n-dsb (any) iceweasel-l10n-el (any) iceweasel-l10n-en-gb (any) iceweasel-l10n-en-za (any) iceweasel-l10n-eo (any) iceweasel-l10n-es-ar (any) iceweasel-l10n-es-cl (any) iceweasel-l10n-es-es (any) iceweasel-l10n-es-mx (any) iceweasel-l10n-et (any) iceweasel-l10n-eu (any) iceweasel-l10n-fa (any) iceweasel-l10n-ff (any) iceweasel-l10n-fi (any) iceweasel-l10n-fr (any) iceweasel-l10n-fy-nl (any) iceweasel-l10n-ga-ie (any) iceweasel-l10n-gd (any) iceweasel-l10n-gl (any) iceweasel-l10n-gn (any) iceweasel-l10n-gu-in (any) iceweasel-l10n-he (any) iceweasel-l10n-hi-in (any) iceweasel-l10n-hr (any) iceweasel-l10n-hsb (any) iceweasel-l10n-hu (any) iceweasel-l10n-hy-am (any) iceweasel-l10n-id (any) iceweasel-l10n-is (any) iceweasel-l10n-it (any) iceweasel-l10n-ja (any) iceweasel-l10n-kk (any) iceweasel-l10n-km (any) iceweasel-l10n-kn (any) iceweasel-l10n-ko (any) iceweasel-l10n-lij (any) iceweasel-l10n-lt (any) iceweasel-l10n-lv (any) iceweasel-l10n-mai (any) iceweasel-l10n-mk (any) iceweasel-l10n-ml (any) iceweasel-l10n-mr (any) iceweasel-l10n-ms (any) iceweasel-l10n-nb-no (any) iceweasel-l10n-nl (any) iceweasel-l10n-nn-no (any) iceweasel-l10n-or (any) iceweasel-l10n-pa-in (any) iceweasel-l10n-pl (any) iceweasel-l10n-pt-br (any) iceweasel-l10n-pt-pt (any) iceweasel-l10n-rm (any) iceweasel-l10n-ro (any) iceweasel-l10n-ru (any) iceweasel-l10n-si (any) iceweasel-l10n-sk (any) iceweasel-l10n-sl (any) iceweasel-l10n-son (any) iceweasel-l10n-sq (any) iceweasel-l10n-sr (any) iceweasel-l10n-sv-se (any) iceweasel-l10n-ta (any) iceweasel-l10n-te (any) iceweasel-l10n-th (any) iceweasel-l10n-tr (any) iceweasel-l10n-uk (any) iceweasel-l10n-uz (any) iceweasel-l10n-vi (any) iceweasel-l10n-xh (any) iceweasel-l10n-zh-cn (any) iceweasel-l10n-zh-tw (any)
Описание
В веб-браузере Mozilla Firefox были обнаружены многочисленные уязвимости:
ошибки целостности содержимого памяти, использование указателей после освобождения
памяти и другие ошибки реализации могут приводить к выполнению произвольного
кода, обходу ASLR, раскрытию информации или отказу в обслуживании.
В стабильном выпуске (jessie) эти проблемы были исправлены в
версии 45.8.0esr-1~deb8u1.
В нестабильном выпуске (sid) эти проблемы были исправлены в
версии 45.8.0esr-1 пакета firefox-esr и в версии 52.0-1 пакета firefox.
Рекомендуется обновить пакеты firefox-esr.
Как исправить
Проблема может быть решена обновлением операционной системыдо следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 8:
noarch:
firefox-esr - 45.8.0esr-1~deb8u1
firefox-esr-dbg - 45.8.0esr-1~deb8u1
firefox-esr-dev - 45.8.0esr-1~deb8u1
firefox-esr-l10n-ach - 45.8.0esr-1~deb8u1
firefox-esr-l10n-af - 45.8.0esr-1~deb8u1
firefox-esr-l10n-all - 45.8.0esr-1~deb8u1
firefox-esr-l10n-an - 45.8.0esr-1~deb8u1
firefox-esr-l10n-ar - 45.8.0esr-1~deb8u1
firefox-esr-l10n-as - 45.8.0esr-1~deb8u1
firefox-esr-l10n-ast - 45.8.0esr-1~deb8u1
firefox-esr-l10n-az - 45.8.0esr-1~deb8u1
firefox-esr-l10n-be - 45.8.0esr-1~deb8u1
firefox-esr-l10n-bg - 45.8.0esr-1~deb8u1
firefox-esr-l10n-bn-bd - 45.8.0esr-1~deb8u1
firefox-esr-l10n-bn-in - 45.8.0esr-1~deb8u1
firefox-esr-l10n-br - 45.8.0esr-1~deb8u1
firefox-esr-l10n-bs - 45.8.0esr-1~deb8u1
firefox-esr-l10n-ca - 45.8.0esr-1~deb8u1
firefox-esr-l10n-cs - 45.8.0esr-1~deb8u1
firefox-esr-l10n-cy - 45.8.0esr-1~deb8u1
firefox-esr-l10n-da - 45.8.0esr-1~deb8u1
firefox-esr-l10n-de - 45.8.0esr-1~deb8u1
firefox-esr-l10n-dsb - 45.8.0esr-1~deb8u1
firefox-esr-l10n-el - 45.8.0esr-1~deb8u1
firefox-esr-l10n-en-gb - 45.8.0esr-1~deb8u1
firefox-esr-l10n-en-za - 45.8.0esr-1~deb8u1
firefox-esr-l10n-eo - 45.8.0esr-1~deb8u1
firefox-esr-l10n-es-ar - 45.8.0esr-1~deb8u1
firefox-esr-l10n-es-cl - 45.8.0esr-1~deb8u1
firefox-esr-l10n-es-es - 45.8.0esr-1~deb8u1
firefox-esr-l10n-es-mx - 45.8.0esr-1~deb8u1
firefox-esr-l10n-et - 45.8.0esr-1~deb8u1
firefox-esr-l10n-eu - 45.8.0esr-1~deb8u1
firefox-esr-l10n-fa - 45.8.0esr-1~deb8u1
firefox-esr-l10n-ff - 45.8.0esr-1~deb8u1
firefox-esr-l10n-fi - 45.8.0esr-1~deb8u1
firefox-esr-l10n-fr - 45.8.0esr-1~deb8u1
firefox-esr-l10n-fy-nl - 45.8.0esr-1~deb8u1
firefox-esr-l10n-ga-ie - 45.8.0esr-1~deb8u1
firefox-esr-l10n-gd - 45.8.0esr-1~deb8u1
firefox-esr-l10n-gl - 45.8.0esr-1~deb8u1
firefox-esr-l10n-gn - 45.8.0esr-1~deb8u1
firefox-esr-l10n-gu-in - 45.8.0esr-1~deb8u1
firefox-esr-l10n-he - 45.8.0esr-1~deb8u1
firefox-esr-l10n-hi-in - 45.8.0esr-1~deb8u1
firefox-esr-l10n-hr - 45.8.0esr-1~deb8u1
firefox-esr-l10n-hsb - 45.8.0esr-1~deb8u1
firefox-esr-l10n-hu - 45.8.0esr-1~deb8u1
firefox-esr-l10n-hy-am - 45.8.0esr-1~deb8u1
firefox-esr-l10n-id - 45.8.0esr-1~deb8u1
firefox-esr-l10n-is - 45.8.0esr-1~deb8u1
firefox-esr-l10n-it - 45.8.0esr-1~deb8u1
firefox-esr-l10n-ja - 45.8.0esr-1~deb8u1
firefox-esr-l10n-kk - 45.8.0esr-1~deb8u1
firefox-esr-l10n-km - 45.8.0esr-1~deb8u1
firefox-esr-l10n-kn - 45.8.0esr-1~deb8u1
firefox-esr-l10n-ko - 45.8.0esr-1~deb8u1
firefox-esr-l10n-lij - 45.8.0esr-1~deb8u1
firefox-esr-l10n-lt - 45.8.0esr-1~deb8u1
firefox-esr-l10n-lv - 45.8.0esr-1~deb8u1
firefox-esr-l10n-mai - 45.8.0esr-1~deb8u1
firefox-esr-l10n-mk - 45.8.0esr-1~deb8u1
firefox-esr-l10n-ml - 45.8.0esr-1~deb8u1
firefox-esr-l10n-mr - 45.8.0esr-1~deb8u1
firefox-esr-l10n-ms - 45.8.0esr-1~deb8u1
firefox-esr-l10n-nb-no - 45.8.0esr-1~deb8u1
firefox-esr-l10n-nl - 45.8.0esr-1~deb8u1
firefox-esr-l10n-nn-no - 45.8.0esr-1~deb8u1
firefox-esr-l10n-or - 45.8.0esr-1~deb8u1
firefox-esr-l10n-pa-in - 45.8.0esr-1~deb8u1
firefox-esr-l10n-pl - 45.8.0esr-1~deb8u1
firefox-esr-l10n-pt-br - 45.8.0esr-1~deb8u1
firefox-esr-l10n-pt-pt - 45.8.0esr-1~deb8u1
firefox-esr-l10n-rm - 45.8.0esr-1~deb8u1
firefox-esr-l10n-ro - 45.8.0esr-1~deb8u1
firefox-esr-l10n-ru - 45.8.0esr-1~deb8u1
firefox-esr-l10n-si - 45.8.0esr-1~deb8u1
firefox-esr-l10n-sk - 45.8.0esr-1~deb8u1
firefox-esr-l10n-sl - 45.8.0esr-1~deb8u1
firefox-esr-l10n-son - 45.8.0esr-1~deb8u1
firefox-esr-l10n-sq - 45.8.0esr-1~deb8u1
firefox-esr-l10n-sr - 45.8.0esr-1~deb8u1
firefox-esr-l10n-sv-se - 45.8.0esr-1~deb8u1
firefox-esr-l10n-ta - 45.8.0esr-1~deb8u1
firefox-esr-l10n-te - 45.8.0esr-1~deb8u1
firefox-esr-l10n-th - 45.8.0esr-1~deb8u1
firefox-esr-l10n-tr - 45.8.0esr-1~deb8u1
firefox-esr-l10n-uk - 45.8.0esr-1~deb8u1
firefox-esr-l10n-uz - 45.8.0esr-1~deb8u1
firefox-esr-l10n-vi - 45.8.0esr-1~deb8u1
firefox-esr-l10n-xh - 45.8.0esr-1~deb8u1
firefox-esr-l10n-zh-cn - 45.8.0esr-1~deb8u1
firefox-esr-l10n-zh-tw - 45.8.0esr-1~deb8u1
iceweasel - 45.8.0esr-1~deb8u1
iceweasel-dbg - 45.8.0esr-1~deb8u1
iceweasel-dev - 45.8.0esr-1~deb8u1
iceweasel-l10n-ach - 45.8.0esr-1~deb8u1
iceweasel-l10n-af - 45.8.0esr-1~deb8u1
iceweasel-l10n-all - 45.8.0esr-1~deb8u1
iceweasel-l10n-an - 45.8.0esr-1~deb8u1
iceweasel-l10n-ar - 45.8.0esr-1~deb8u1
iceweasel-l10n-as - 45.8.0esr-1~deb8u1
iceweasel-l10n-ast - 45.8.0esr-1~deb8u1
iceweasel-l10n-az - 45.8.0esr-1~deb8u1
iceweasel-l10n-be - 45.8.0esr-1~deb8u1
iceweasel-l10n-bg - 45.8.0esr-1~deb8u1
iceweasel-l10n-bn-bd - 45.8.0esr-1~deb8u1
iceweasel-l10n-bn-in - 45.8.0esr-1~deb8u1
iceweasel-l10n-br - 45.8.0esr-1~deb8u1
iceweasel-l10n-bs - 45.8.0esr-1~deb8u1
iceweasel-l10n-ca - 45.8.0esr-1~deb8u1
iceweasel-l10n-cs - 45.8.0esr-1~deb8u1
iceweasel-l10n-cy - 45.8.0esr-1~deb8u1
iceweasel-l10n-da - 45.8.0esr-1~deb8u1
iceweasel-l10n-de - 45.8.0esr-1~deb8u1
iceweasel-l10n-dsb - 45.8.0esr-1~deb8u1
iceweasel-l10n-el - 45.8.0esr-1~deb8u1
iceweasel-l10n-en-gb - 45.8.0esr-1~deb8u1
iceweasel-l10n-en-za - 45.8.0esr-1~deb8u1
iceweasel-l10n-eo - 45.8.0esr-1~deb8u1
iceweasel-l10n-es-ar - 45.8.0esr-1~deb8u1
iceweasel-l10n-es-cl - 45.8.0esr-1~deb8u1
iceweasel-l10n-es-es - 45.8.0esr-1~deb8u1
iceweasel-l10n-es-mx - 45.8.0esr-1~deb8u1
iceweasel-l10n-et - 45.8.0esr-1~deb8u1
iceweasel-l10n-eu - 45.8.0esr-1~deb8u1
iceweasel-l10n-fa - 45.8.0esr-1~deb8u1
iceweasel-l10n-ff - 45.8.0esr-1~deb8u1
iceweasel-l10n-fi - 45.8.0esr-1~deb8u1
iceweasel-l10n-fr - 45.8.0esr-1~deb8u1
iceweasel-l10n-fy-nl - 45.8.0esr-1~deb8u1
iceweasel-l10n-ga-ie - 45.8.0esr-1~deb8u1
iceweasel-l10n-gd - 45.8.0esr-1~deb8u1
iceweasel-l10n-gl - 45.8.0esr-1~deb8u1
iceweasel-l10n-gn - 45.8.0esr-1~deb8u1
iceweasel-l10n-gu-in - 45.8.0esr-1~deb8u1
iceweasel-l10n-he - 45.8.0esr-1~deb8u1
iceweasel-l10n-hi-in - 45.8.0esr-1~deb8u1
iceweasel-l10n-hr - 45.8.0esr-1~deb8u1
iceweasel-l10n-hsb - 45.8.0esr-1~deb8u1
iceweasel-l10n-hu - 45.8.0esr-1~deb8u1
iceweasel-l10n-hy-am - 45.8.0esr-1~deb8u1
iceweasel-l10n-id - 45.8.0esr-1~deb8u1
iceweasel-l10n-is - 45.8.0esr-1~deb8u1
iceweasel-l10n-it - 45.8.0esr-1~deb8u1
iceweasel-l10n-ja - 45.8.0esr-1~deb8u1
iceweasel-l10n-kk - 45.8.0esr-1~deb8u1
iceweasel-l10n-km - 45.8.0esr-1~deb8u1
iceweasel-l10n-kn - 45.8.0esr-1~deb8u1
iceweasel-l10n-ko - 45.8.0esr-1~deb8u1
iceweasel-l10n-lij - 45.8.0esr-1~deb8u1
iceweasel-l10n-lt - 45.8.0esr-1~deb8u1
iceweasel-l10n-lv - 45.8.0esr-1~deb8u1
iceweasel-l10n-mai - 45.8.0esr-1~deb8u1
iceweasel-l10n-mk - 45.8.0esr-1~deb8u1
iceweasel-l10n-ml - 45.8.0esr-1~deb8u1
iceweasel-l10n-mr - 45.8.0esr-1~deb8u1
iceweasel-l10n-ms - 45.8.0esr-1~deb8u1
iceweasel-l10n-nb-no - 45.8.0esr-1~deb8u1
iceweasel-l10n-nl - 45.8.0esr-1~deb8u1
iceweasel-l10n-nn-no - 45.8.0esr-1~deb8u1
iceweasel-l10n-or - 45.8.0esr-1~deb8u1
iceweasel-l10n-pa-in - 45.8.0esr-1~deb8u1
iceweasel-l10n-pl - 45.8.0esr-1~deb8u1
iceweasel-l10n-pt-br - 45.8.0esr-1~deb8u1
iceweasel-l10n-pt-pt - 45.8.0esr-1~deb8u1
iceweasel-l10n-rm - 45.8.0esr-1~deb8u1
iceweasel-l10n-ro - 45.8.0esr-1~deb8u1
iceweasel-l10n-ru - 45.8.0esr-1~deb8u1
iceweasel-l10n-si - 45.8.0esr-1~deb8u1
iceweasel-l10n-sk - 45.8.0esr-1~deb8u1
iceweasel-l10n-sl - 45.8.0esr-1~deb8u1
iceweasel-l10n-son - 45.8.0esr-1~deb8u1
iceweasel-l10n-sq - 45.8.0esr-1~deb8u1
iceweasel-l10n-sr - 45.8.0esr-1~deb8u1
iceweasel-l10n-sv-se - 45.8.0esr-1~deb8u1
iceweasel-l10n-ta - 45.8.0esr-1~deb8u1
iceweasel-l10n-te - 45.8.0esr-1~deb8u1
iceweasel-l10n-th - 45.8.0esr-1~deb8u1
iceweasel-l10n-tr - 45.8.0esr-1~deb8u1
iceweasel-l10n-uk - 45.8.0esr-1~deb8u1
iceweasel-l10n-uz - 45.8.0esr-1~deb8u1
iceweasel-l10n-vi - 45.8.0esr-1~deb8u1
iceweasel-l10n-xh - 45.8.0esr-1~deb8u1
iceweasel-l10n-zh-cn - 45.8.0esr-1~deb8u1
iceweasel-l10n-zh-tw - 45.8.0esr-1~deb8u1
Ссылки
http://www.debian.org/security/dsa-3805/

Источник: CVE
Наименование: CVE-2017-5402
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5402

Источник: CVE
Наименование: CVE-2017-5410
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5410

Источник: CVE
Наименование: CVE-2017-5400
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5400

Источник: CVE
Наименование: CVE-2017-5401
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5401

Источник: CVE
Наименование: CVE-2017-5407
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5407

Источник: CVE
Наименование: CVE-2017-5404
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5404

Источник: CVE
Наименование: CVE-2017-5405
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5405

Источник: CVE
Наименование: CVE-2017-5408
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5408

Источник: CVE
Наименование: CVE-2017-5398
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5398