CVE catalog

CVE-2016-1930

Security update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nss

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
5.99% · Oct 25, 2026

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntufirefox14.0424.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0425.0+build3-0ubuntu0.13.10.1vulnerable
Ubuntufirefox14.0428.0~b2+build1-0ubuntu2vulnerable
Ubuntufirefox14.0428.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu2vulnerable
Ubuntufirefox14.0429.0+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0430.0+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0431.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0433.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0434.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0435.0+build3-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0435.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0+build2-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0436.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0.4+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0438.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0+build5-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0.3+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0440.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.2+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0442.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0.4+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0+build3-0ubuntu0.14.04.1fixed
Ubuntuthunderbird14.041:24.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.0+build1-0ubuntu2vulnerable
Ubuntuthunderbird14.041:24.1.1+build1-0ubuntu0.13.10.1vulnerable
Ubuntuthunderbird14.041:24.1.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.2.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.4.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.5.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:24.6.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.1.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.1.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.2.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.3.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.4.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.5.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.6.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.7.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.8.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:38.2.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:38.3.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:38.4.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:38.5.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:38.6.0+build1-0ubuntu0.14.04.1fixed
Ubuntufirefox14.0424.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0425.0+build3-0ubuntu0.13.10.1vulnerable
Ubuntufirefox14.0428.0~b2+build1-0ubuntu2vulnerable
Ubuntufirefox14.0428.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu2vulnerable
Ubuntufirefox14.0429.0+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0430.0+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0431.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0433.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0434.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0435.0+build3-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0435.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0+build2-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0436.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0.4+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0438.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0+build5-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0.3+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0440.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.2+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0442.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0.4+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0+build3-0ubuntu0.14.04.1fixed
SuseMozillaFirefoxlinux enterprise software development kit 11 sp338.6.0esr-31.3fixed
Susemozilla-nsslinux enterprise software development kit 11 sp33.20.2-25.2fixed
SuseMozillaFirefoxlinux enterprise software development kit 11 sp438.6.0esr-31.3fixed
Susemozilla-nsslinux enterprise software development kit 11 sp43.20.2-25.2fixed
SuseMozillaFirefoxlinux enterprise desktop 11 sp338.6.0esr-31.3fixed
SuseMozillaFirefox-branding-SLEDlinux enterprise desktop 11 sp338-18.24fixed
Susemozilla-nsslinux enterprise desktop 11 sp33.20.2-25.2fixed
SuseMozillaFirefoxlinux enterprise desktop 11 sp438.6.0esr-31.3fixed
SuseMozillaFirefox-branding-SLEDlinux enterprise desktop 11 sp438-18.24fixed
Susemozilla-nsslinux enterprise desktop 11 sp43.20.2-25.2fixed
SuseMozillaFirefoxlinux enterprise server 11 sp338.6.0esr-31.3fixed
SuseMozillaFirefox-branding-SLEDlinux enterprise server 11 sp338-18.24fixed
Susemozilla-nsslinux enterprise server 11 sp33.20.2-25.2fixed
SuseMozillaFirefoxlinux enterprise server 11 sp3-teradata38.6.0esr-31.3fixed
SuseMozillaFirefox-branding-SLEDlinux enterprise server 11 sp3-teradata38-18.24fixed
Susemozilla-nsslinux enterprise server 11 sp3-teradata3.20.2-25.2fixed
SuseMozillaFirefoxlinux enterprise server for sap applications 11 sp338.6.0esr-31.3fixed
SuseMozillaFirefox-branding-SLEDlinux enterprise server for sap applications 11 sp338-18.24fixed
Susemozilla-nsslinux enterprise server for sap applications 11 sp33.20.2-25.2fixed
SuseMozillaFirefoxlinux enterprise server 11 sp438.6.0esr-31.3fixed
SuseMozillaFirefox-branding-SLEDlinux enterprise server 11 sp438-18.24fixed
Susemozilla-nsslinux enterprise server 11 sp43.20.2-25.2fixed
SuseMozillaFirefoxlinux enterprise server for sap applications 11 sp438.6.0esr-31.3fixed
SuseMozillaFirefox-branding-SLEDlinux enterprise server for sap applications 11 sp438-18.24fixed
Susemozilla-nsslinux enterprise server for sap applications 11 sp43.20.2-25.2fixed
SuseMozillaFirefoxlinux enterprise desktop 1238.6.0esr-57.3fixed
SuseMozillaFirefox-branding-SLElinux enterprise desktop 1231.0-20.1fixed
Susemozilla-nsslinux enterprise desktop 123.20.2-37.1fixed
SuseMozillaFirefoxlinux enterprise desktop 12 sp138.6.0esr-57.3fixed
SuseMozillaFirefox-branding-SLElinux enterprise desktop 12 sp131.0-20.1fixed
Susemozilla-nsslinux enterprise desktop 12 sp13.20.2-37.1fixed
SuseMozillaFirefoxlinux enterprise software development kit 1238.6.0esr-57.3fixed
Susemozilla-nsslinux enterprise software development kit 123.20.2-37.1fixed
SuseMozillaFirefoxlinux enterprise software development kit 12 sp138.6.0esr-57.3fixed
Susemozilla-nsslinux enterprise software development kit 12 sp13.20.2-37.1fixed
SuseMozillaFirefoxlinux enterprise server 1238.6.0esr-57.3fixed
SuseMozillaFirefox-branding-SLElinux enterprise server 1231.0-20.1fixed
Susemozilla-nsslinux enterprise server 123.20.2-37.1fixed
SuseMozillaFirefoxlinux enterprise server for sap applications 1238.6.0esr-57.3fixed
SuseMozillaFirefox-branding-SLElinux enterprise server for sap applications 1231.0-20.1fixed
Susemozilla-nsslinux enterprise server for sap applications 123.20.2-37.1fixed
SuseMozillaFirefoxlinux enterprise server 12 sp138.6.0esr-57.3fixed
SuseMozillaFirefox-branding-SLElinux enterprise server 12 sp131.0-20.1fixed
Susemozilla-nsslinux enterprise server 12 sp13.20.2-37.1fixed
SuseMozillaFirefoxlinux enterprise server for sap applications 12 sp138.6.0esr-57.3fixed
SuseMozillaFirefox-branding-SLElinux enterprise server for sap applications 12 sp131.0-20.1fixed
Susemozilla-nsslinux enterprise server for sap applications 12 sp13.20.2-37.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntufirefoxdeb14.0444.0+build3-0ubuntu0.14.04.1Not reportedUBUNTU-CVE-2016-1930Not reported
Ubuntuthunderbirddeb14.041:38.6.0+build1-0ubuntu0.14.04.1Not reportedUBUNTU-CVE-2016-1930Not reported
Ubuntufirefoxdeb14.0444.0+build3-0ubuntu0.14.04.1Not reportedUSN-2880-1Not reported
SuseMozillaFirefoxrpmlinux enterprise software development kit 11 sp338.6.0esr-31.3Not reportedSUSE-SU-2016:0334-1Not reported
Susemozilla-nssrpmlinux enterprise software development kit 11 sp33.20.2-25.2Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefoxrpmlinux enterprise software development kit 11 sp438.6.0esr-31.3Not reportedSUSE-SU-2016:0334-1Not reported
Susemozilla-nssrpmlinux enterprise software development kit 11 sp43.20.2-25.2Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefoxrpmlinux enterprise desktop 11 sp338.6.0esr-31.3Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefox-branding-SLEDrpmlinux enterprise desktop 11 sp338-18.24Not reportedSUSE-SU-2016:0334-1Not reported
Susemozilla-nssrpmlinux enterprise desktop 11 sp33.20.2-25.2Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefoxrpmlinux enterprise desktop 11 sp438.6.0esr-31.3Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefox-branding-SLEDrpmlinux enterprise desktop 11 sp438-18.24Not reportedSUSE-SU-2016:0334-1Not reported
Susemozilla-nssrpmlinux enterprise desktop 11 sp43.20.2-25.2Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 11 sp338.6.0esr-31.3Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefox-branding-SLEDrpmlinux enterprise server 11 sp338-18.24Not reportedSUSE-SU-2016:0334-1Not reported
Susemozilla-nssrpmlinux enterprise server 11 sp33.20.2-25.2Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 11 sp3-teradata38.6.0esr-31.3Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefox-branding-SLEDrpmlinux enterprise server 11 sp3-teradata38-18.24Not reportedSUSE-SU-2016:0334-1Not reported
Susemozilla-nssrpmlinux enterprise server 11 sp3-teradata3.20.2-25.2Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server for sap applications 11 sp338.6.0esr-31.3Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefox-branding-SLEDrpmlinux enterprise server for sap applications 11 sp338-18.24Not reportedSUSE-SU-2016:0334-1Not reported
Susemozilla-nssrpmlinux enterprise server for sap applications 11 sp33.20.2-25.2Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 11 sp438.6.0esr-31.3Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefox-branding-SLEDrpmlinux enterprise server 11 sp438-18.24Not reportedSUSE-SU-2016:0334-1Not reported
Susemozilla-nssrpmlinux enterprise server 11 sp43.20.2-25.2Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server for sap applications 11 sp438.6.0esr-31.3Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefox-branding-SLEDrpmlinux enterprise server for sap applications 11 sp438-18.24Not reportedSUSE-SU-2016:0334-1Not reported
Susemozilla-nssrpmlinux enterprise server for sap applications 11 sp43.20.2-25.2Not reportedSUSE-SU-2016:0334-1Not reported
SuseMozillaFirefoxrpmlinux enterprise desktop 1238.6.0esr-57.3Not reportedSUSE-SU-2016:0338-1Not reported
SuseMozillaFirefox-branding-SLErpmlinux enterprise desktop 1231.0-20.1Not reportedSUSE-SU-2016:0338-1Not reported
Susemozilla-nssrpmlinux enterprise desktop 123.20.2-37.1Not reportedSUSE-SU-2016:0338-1Not reported
SuseMozillaFirefoxrpmlinux enterprise desktop 12 sp138.6.0esr-57.3Not reportedSUSE-SU-2016:0338-1Not reported
SuseMozillaFirefox-branding-SLErpmlinux enterprise desktop 12 sp131.0-20.1Not reportedSUSE-SU-2016:0338-1Not reported
Susemozilla-nssrpmlinux enterprise desktop 12 sp13.20.2-37.1Not reportedSUSE-SU-2016:0338-1Not reported
SuseMozillaFirefoxrpmlinux enterprise software development kit 1238.6.0esr-57.3Not reportedSUSE-SU-2016:0338-1Not reported
Susemozilla-nssrpmlinux enterprise software development kit 123.20.2-37.1Not reportedSUSE-SU-2016:0338-1Not reported
SuseMozillaFirefoxrpmlinux enterprise software development kit 12 sp138.6.0esr-57.3Not reportedSUSE-SU-2016:0338-1Not reported
Susemozilla-nssrpmlinux enterprise software development kit 12 sp13.20.2-37.1Not reportedSUSE-SU-2016:0338-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 1238.6.0esr-57.3Not reportedSUSE-SU-2016:0338-1Not reported
SuseMozillaFirefox-branding-SLErpmlinux enterprise server 1231.0-20.1Not reportedSUSE-SU-2016:0338-1Not reported
Susemozilla-nssrpmlinux enterprise server 123.20.2-37.1Not reportedSUSE-SU-2016:0338-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server for sap applications 1238.6.0esr-57.3Not reportedSUSE-SU-2016:0338-1Not reported
SuseMozillaFirefox-branding-SLErpmlinux enterprise server for sap applications 1231.0-20.1Not reportedSUSE-SU-2016:0338-1Not reported
Susemozilla-nssrpmlinux enterprise server for sap applications 123.20.2-37.1Not reportedSUSE-SU-2016:0338-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 12 sp138.6.0esr-57.3Not reportedSUSE-SU-2016:0338-1Not reported
SuseMozillaFirefox-branding-SLErpmlinux enterprise server 12 sp131.0-20.1Not reportedSUSE-SU-2016:0338-1Not reported
Susemozilla-nssrpmlinux enterprise server 12 sp13.20.2-37.1Not reportedSUSE-SU-2016:0338-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server for sap applications 12 sp138.6.0esr-57.3Not reportedSUSE-SU-2016:0338-1Not reported
SuseMozillaFirefox-branding-SLErpmlinux enterprise server for sap applications 12 sp131.0-20.1Not reportedSUSE-SU-2016:0338-1Not reported
Susemozilla-nssrpmlinux enterprise server for sap applications 12 sp13.20.2-37.1Not reportedSUSE-SU-2016:0338-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References