CVE-2017-7800 A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulner...
CriticalCVSS 9.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firefox-esr(Debian:12) | < 52.3.0esr-1 | 52.3.0esr-1 |
| debian/firefox-esr(Debian:13) | < 52.3.0esr-1 | 52.3.0esr-1 |
| debian/firefox-esr(Debian:14) | < 52.3.0esr-1 | 52.3.0esr-1 |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.3 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| mozilla Firefox | < 55.0 | 55.0 |
| mozilla Firefox | < 52.3.0 | 52.3.0 |
| mozilla Thunderbird | < 52.3.0 | 52.3.0 |
| mozilla Thunderbird | < 52.3 | 52.3 |
| mozilla firefox esr | < 52.3 | 52.3 |
| mozilla Firefox | < 55 | 55 |
References
- Debian Security Tracker CVE-2017-7800 vendor-advisory
- 100196 third-party-advisory vdb-entry
- 1039124 third-party-advisory vdb-entry
- RHSA-2017:2456 third-party-advisory vendor-advisory
- RHSA-2017:2534 third-party-advisory vendor-advisory
- bugzilla.mozilla.org exploit issue-tracking patch vendor-advisory
- GLSA-201803-14 third-party-advisory vendor-advisory
- DSA-3928 third-party-advisory vendor-advisory
- DSA-3968 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory