CVE-2019-11745 Memory corruption in Firefox

Q: Is CVE-2019-11745 being exploited?

There is no known exploitation of CVE-2019-11745 in the wild and no public exploit code.

High 8.8 Published 8 Jan 2020 Updated 4 Aug 2024

An out-of-bounds write in block cipher encryption can cause heap corruption, potentially leading to code execution or crashes in Firefox and Thunderbird.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2019-11745?

CVE-2019-11745 is a high-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 8 Jan 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.

Weakness: CWE-787

Which versions are affected by CVE-2019-11745?

It affects 15 products.

Linux distribution packages (40)

`nss-softokn` Red Hat:enterprise_linux:6::client	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-debuginfo` Red Hat:enterprise_linux:6::client	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-devel` Red Hat:enterprise_linux:6::client	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-freebl` Red Hat:enterprise_linux:6::client	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-freebl-devel` Red Hat:enterprise_linux:6::client	All versions	`0:3.44.0-6.el6_10`
`nss-softokn` Red Hat:enterprise_linux:6::computenode	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-debuginfo` Red Hat:enterprise_linux:6::computenode	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-devel` Red Hat:enterprise_linux:6::computenode	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-freebl` Red Hat:enterprise_linux:6::computenode	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-freebl-devel` Red Hat:enterprise_linux:6::computenode	All versions	`0:3.44.0-6.el6_10`
`nss-softokn` Red Hat:enterprise_linux:6::server	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-devel` Red Hat:enterprise_linux:6::server	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-freebl` Red Hat:enterprise_linux:6::server	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-freebl-devel` Red Hat:enterprise_linux:6::server	All versions	`0:3.44.0-6.el6_10`
`nss-softokn` Red Hat:enterprise_linux:6::workstation	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-debuginfo` Red Hat:enterprise_linux:6::workstation	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-devel` Red Hat:enterprise_linux:6::workstation	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-freebl` Red Hat:enterprise_linux:6::workstation	All versions	`0:3.44.0-6.el6_10`
`nss-softokn-freebl-devel` Red Hat:enterprise_linux:6::workstation	All versions	`0:3.44.0-6.el6_10`
`nss` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-debuginfo` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-debugsource` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-devel` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-softokn` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-softokn-debuginfo` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-softokn-devel` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-softokn-freebl` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-softokn-freebl-debuginfo` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-softokn-freebl-devel` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-sysinit` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-sysinit-debuginfo` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-tools` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-tools-debuginfo` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-util` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-util-debuginfo` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-util-devel` Red Hat:enterprise_linux:8::appstream	All versions	`0:3.44.0-9.el8_1`
`nss-softokn` Red Hat:rhel_aus:6.6::server	All versions	`0:3.14.3-23.el6_6`
`nss-softokn-debuginfo` Red Hat:rhel_aus:6.6::server	All versions	`0:3.14.3-23.el6_6`
`nss-softokn-devel` Red Hat:rhel_aus:6.6::server	All versions	`0:3.14.3-23.el6_6`

Products include Canonical Ubuntu Linux, Debian Debian Linux, Mozilla Firefox, Mozilla Firefox Esr, Mozilla Thunderbird, Opensuse Leap and 9 more.

How do I fix CVE-2019-11745?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2019-11745 being exploited?

There is no known exploitation of CVE-2019-11745 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as ALPINE-CVE-2019-11745, DEBIAN-CVE-2019-11745, DLA-2008-1, GHSA-gmvm-jpfj-v3f5, MGASA-2019-0374, RHSA-2019:4114 and 6 more.