CVE catalog

CVE-2016-2805

firefox-esr: CVE-2016-2805

[CVE catalog]

Severity
High · CVSS 8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
4.65% · Oct 25, 2026

Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfirefox-esrsid153.5.1esr-1not affected
Debianfirefox-esrforky153.5.1esr-1not affected
Debianfirefox-esrtrixie140.15.0esr-1~deb13u1not affected
Debianfirefox-esrtrixie-security153.5.1esr-1~deb13u1not affected
Debianfirefox-esrbookworm140.12.0esr-1~deb12u1not affected
Debianfirefox-esrbookworm-security153.5.1esr-1~deb12u1not affected
Ubuntuthunderbird14.041:24.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.0+build1-0ubuntu2vulnerable
Ubuntuthunderbird14.041:24.1.1+build1-0ubuntu0.13.10.1vulnerable
Ubuntuthunderbird14.041:24.1.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.2.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.4.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird14.041:24.5.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:24.6.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.1.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.1.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.2.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.3.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.4.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.5.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.6.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.7.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:31.8.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:38.2.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:38.3.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:38.4.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:38.5.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:38.6.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:38.7.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntuthunderbird14.041:38.8.0+build1-0ubuntu0.14.04.1fixed
Ubuntuthunderbird16.041:38.3.0+build1-0ubuntu2vulnerable
Ubuntuthunderbird16.041:38.5.1+build2-0ubuntu1vulnerable
Ubuntuthunderbird16.041:38.6.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird16.041:38.7.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntuthunderbird16.041:38.8.0+build1-0ubuntu0.16.04.1fixed
SuseMozillaFirefoxlinux enterprise server 11 sp2-ltss38.8.0esr-40.1fixed
SuseMozillaFirefoxlinux enterprise software development kit 11 sp438.8.0esr-40.5fixed
Susemozilla-nsprlinux enterprise software development kit 11 sp44.12-26.1fixed
Susemozilla-nsslinux enterprise software development kit 11 sp43.20.2-30.1fixed
SuseMozillaFirefoxopenstack cloud 538.8.0esr-40.5fixed
Susemozilla-nspropenstack cloud 54.12-26.1fixed
Susemozilla-nssopenstack cloud 53.20.2-30.1fixed
SuseMozillaFirefoxmanager 2.138.8.0esr-40.5fixed
Susemozilla-nsprmanager 2.14.12-26.1fixed
Susemozilla-nssmanager 2.13.20.2-30.1fixed
SuseMozillaFirefoxmanager proxy 2.138.8.0esr-40.5fixed
Susemozilla-nsprmanager proxy 2.14.12-26.1fixed
Susemozilla-nssmanager proxy 2.13.20.2-30.1fixed
SuseMozillaFirefoxlinux enterprise server 11 sp3-ltss38.8.0esr-40.5fixed
Susemozilla-nsprlinux enterprise server 11 sp3-ltss4.12-26.1fixed
Susemozilla-nsslinux enterprise server 11 sp3-ltss3.20.2-30.1fixed
SuseMozillaFirefoxlinux enterprise server 11 sp3-teradata38.8.0esr-40.5fixed
Susemozilla-nsprlinux enterprise server 11 sp3-teradata4.12-26.1fixed
Susemozilla-nsslinux enterprise server 11 sp3-teradata3.20.2-30.1fixed
SuseMozillaFirefoxlinux enterprise server 11 sp438.8.0esr-40.5fixed
Susemozilla-nsprlinux enterprise server 11 sp44.12-26.1fixed
Susemozilla-nsslinux enterprise server 11 sp43.20.2-30.1fixed
SuseMozillaFirefoxlinux enterprise server for sap applications 11 sp438.8.0esr-40.5fixed
Susemozilla-nsprlinux enterprise server for sap applications 11 sp44.12-26.1fixed
Susemozilla-nsslinux enterprise server for sap applications 11 sp43.20.2-30.1fixed
SuseMozillaFirefoxlinux enterprise desktop 1238.8.0esr-66.2fixed
SuseMozillaFirefoxlinux enterprise desktop 12 sp138.8.0esr-66.2fixed
SuseMozillaFirefoxlinux enterprise software development kit 1238.8.0esr-66.2fixed
SuseMozillaFirefoxlinux enterprise software development kit 12 sp138.8.0esr-66.2fixed
SuseMozillaFirefoxlinux enterprise server 1238.8.0esr-66.2fixed
SuseMozillaFirefoxlinux enterprise server for sap applications 1238.8.0esr-66.2fixed
SuseMozillaFirefoxlinux enterprise server 12 sp138.8.0esr-66.2fixed
SuseMozillaFirefoxlinux enterprise server for sap applications 12 sp138.8.0esr-66.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfirefox-esrsourcesidNot affectedunimportantNot reportedNot reported
Debianfirefox-esrsourceforkyNot affectedunimportantNot reportedNot reported
Debianfirefox-esrsourcetrixieNot affectedunimportantNot reportedNot reported
Debianfirefox-esrsourcebookwormNot affectedunimportantNot reportedNot reported
Ubuntuthunderbirddeb14.041:38.8.0+build1-0ubuntu0.14.04.1Not reportedUBUNTU-CVE-2016-2805Not reported
Ubuntuthunderbirddeb16.041:38.8.0+build1-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2016-2805Not reported
SuseMozillaFirefoxrpmlinux enterprise server 11 sp2-ltss38.8.0esr-40.1Not reportedSUSE-SU-2016:1342-1Not reported
SuseMozillaFirefoxrpmlinux enterprise software development kit 11 sp438.8.0esr-40.5Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nsprrpmlinux enterprise software development kit 11 sp44.12-26.1Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nssrpmlinux enterprise software development kit 11 sp43.20.2-30.1Not reportedSUSE-SU-2016:1374-1Not reported
SuseMozillaFirefoxrpmopenstack cloud 538.8.0esr-40.5Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nsprrpmopenstack cloud 54.12-26.1Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nssrpmopenstack cloud 53.20.2-30.1Not reportedSUSE-SU-2016:1374-1Not reported
SuseMozillaFirefoxrpmmanager 2.138.8.0esr-40.5Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nsprrpmmanager 2.14.12-26.1Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nssrpmmanager 2.13.20.2-30.1Not reportedSUSE-SU-2016:1374-1Not reported
SuseMozillaFirefoxrpmmanager proxy 2.138.8.0esr-40.5Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nsprrpmmanager proxy 2.14.12-26.1Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nssrpmmanager proxy 2.13.20.2-30.1Not reportedSUSE-SU-2016:1374-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 11 sp3-ltss38.8.0esr-40.5Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nsprrpmlinux enterprise server 11 sp3-ltss4.12-26.1Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nssrpmlinux enterprise server 11 sp3-ltss3.20.2-30.1Not reportedSUSE-SU-2016:1374-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 11 sp3-teradata38.8.0esr-40.5Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nsprrpmlinux enterprise server 11 sp3-teradata4.12-26.1Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nssrpmlinux enterprise server 11 sp3-teradata3.20.2-30.1Not reportedSUSE-SU-2016:1374-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 11 sp438.8.0esr-40.5Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nsprrpmlinux enterprise server 11 sp44.12-26.1Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nssrpmlinux enterprise server 11 sp43.20.2-30.1Not reportedSUSE-SU-2016:1374-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server for sap applications 11 sp438.8.0esr-40.5Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nsprrpmlinux enterprise server for sap applications 11 sp44.12-26.1Not reportedSUSE-SU-2016:1374-1Not reported
Susemozilla-nssrpmlinux enterprise server for sap applications 11 sp43.20.2-30.1Not reportedSUSE-SU-2016:1374-1Not reported
SuseMozillaFirefoxrpmlinux enterprise desktop 1238.8.0esr-66.2Not reportedSUSE-SU-2016:1258-1Not reported
SuseMozillaFirefoxrpmlinux enterprise desktop 12 sp138.8.0esr-66.2Not reportedSUSE-SU-2016:1258-1Not reported
SuseMozillaFirefoxrpmlinux enterprise software development kit 1238.8.0esr-66.2Not reportedSUSE-SU-2016:1258-1Not reported
SuseMozillaFirefoxrpmlinux enterprise software development kit 12 sp138.8.0esr-66.2Not reportedSUSE-SU-2016:1258-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 1238.8.0esr-66.2Not reportedSUSE-SU-2016:1258-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server for sap applications 1238.8.0esr-66.2Not reportedSUSE-SU-2016:1258-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 12 sp138.8.0esr-66.2Not reportedSUSE-SU-2016:1258-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server for sap applications 12 sp138.8.0esr-66.2Not reportedSUSE-SU-2016:1258-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [firefox-esr]Unknown
    Details (4)
    • 140.12.0esr-1~deb12u1 · amd64 · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · arm64 · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      dsa · firefox-esr · debian · bookworm

Next results

Observed:

References