p PatchFirst

CVE-2016-1968

CVE-2016-1968

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted data with brotli compression.

CVSS 8.8 · High · EPSS 4.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • brotli Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.3.0+dfsg-3

    Update to 0.3.0+dfsg-3

  • brotli Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.3.0+dfsg-3

    Update to 0.3.0+dfsg-3

  • brotli Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.3.0+dfsg-3

    Update to 0.3.0+dfsg-3

  • firefox-esr Debian:12

    Affected ranges
    • ECOSYSTEM: < 45.0esr-1

    Update to 45.0esr-1

  • firefox-esr Debian:13

    Affected ranges
    • ECOSYSTEM: < 45.0esr-1

    Update to 45.0esr-1

  • firefox-esr Debian:14

    Affected ranges
    • ECOSYSTEM: < 45.0esr-1

    Update to 45.0esr-1

  • firefox Ubuntu:14.04:LTS

    Versions
    • 24.0+build1-0ubuntu1
    • 25.0+build3-0ubuntu0.13.10.1
    • 28.0~b2+build1-0ubuntu2
    • 28.0+build1-0ubuntu1
    • 28.0+build2-0ubuntu1
    • 28.0+build2-0ubuntu2
    • 29.0+build1-0ubuntu0.14.04.2
    • 30.0+build1-0ubuntu0.14.04.3
    • 31.0+build1-0ubuntu0.14.04.1
    • 32.0+build1-0ubuntu0.14.04.1
    • 32.0.3+build1-0ubuntu0.14.04.1
    • 33.0+build2-0ubuntu0.14.04.1
    • 34.0+build2-0ubuntu0.14.04.1
    • 35.0+build3-0ubuntu0.14.04.2
    • 35.0.1+build1-0ubuntu0.14.04.1
    • 36.0+build2-0ubuntu0.14.04.4
    • 36.0.1+build2-0ubuntu0.14.04.1
    • 36.0.4+build1-0ubuntu0.14.04.1
    • 37.0+build2-0ubuntu0.14.04.1
    • 37.0.1+build1-0ubuntu0.14.04.1
    • 37.0.2+build1-0ubuntu0.14.04.1
    • 38.0+build3-0ubuntu0.14.04.1
    • 39.0+build5-0ubuntu0.14.04.1
    • 39.0.3+build2-0ubuntu0.14.04.1
    • 40.0+build4-0ubuntu0.14.04.1
    • 40.0+build4-0ubuntu0.14.04.4
    • 40.0.3+build1-0ubuntu0.14.04.1
    • 41.0+build3-0ubuntu0.14.04.1
    • 41.0.1+build2-0ubuntu0.14.04.1
    • 41.0.2+build2-0ubuntu0.14.04.1
    • 42.0+build2-0ubuntu0.14.04.1
    • 43.0+build1-0ubuntu0.14.04.1
    • 43.0.4+build3-0ubuntu0.14.04.1
    • 44.0+build3-0ubuntu0.14.04.1
    • 44.0.1+build2-0ubuntu0.14.04.1
    • 44.0.2+build1-0ubuntu0.14.04.1
    Affected ranges
    • ECOSYSTEM: < 45.0+build2-0ubuntu0.14.04.1

    Update to 45.0+build2-0ubuntu0.14.04.1

  • brotli Ubuntu:16.04:LTS

    Versions
    • 0.2.0+dfsg-1
    • 0.3.0+dfsg-1
    • 0.3.0+dfsg-2
    Affected ranges
    • ECOSYSTEM: < 0.3.0+dfsg-2ubuntu1

    Update to 0.3.0+dfsg-2ubuntu1

Original sources

Check your server →