CVE catalog

CVE-2017-7811

UBUNTU-CVE-2017-7811

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.27% · Oct 25, 2026

Memory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 56.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntufirefox14.0424.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0425.0+build3-0ubuntu0.13.10.1vulnerable
Ubuntufirefox14.0428.0~b2+build1-0ubuntu2vulnerable
Ubuntufirefox14.0428.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu2vulnerable
Ubuntufirefox14.0429.0+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0430.0+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0431.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0433.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0434.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0435.0+build3-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0435.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0+build2-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0436.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0.4+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0438.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0+build5-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0.3+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0440.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.2+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0442.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0.4+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0445.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0445.0.1+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0445.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0446.0+build5-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0446.0.1+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0447.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0448.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0449.0+build4-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0449.0.2+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0450.0+build2-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0450.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0450.1.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0451.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0451.0.1+build2-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0452.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0452.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0452.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0453.0+build6-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0453.0.2+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0453.0.3+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0454.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0455.0.1+build2-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0455.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0456.0+build6-0ubuntu0.14.04.1fixed
Ubuntufirefox16.0441.0.2+build2-0ubuntu1vulnerable
Ubuntufirefox16.0442.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0444.0+build3-0ubuntu2vulnerable
Ubuntufirefox16.0444.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0444.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0446.0+build5-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0446.0.1+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0447.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0448.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0+build4-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0.2+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0450.0+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0450.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0450.1.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0451.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0451.0.1+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0452.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0452.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0452.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0453.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0453.0.2+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0453.0.3+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0454.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0455.0.1+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0455.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0456.0+build6-0ubuntu0.16.04.1fixed
Ubuntufirefox18.0456.0+build6-0ubuntu1fixed
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu3vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu4vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntufirefoxdeb14.0456.0+build6-0ubuntu0.14.04.1Not reportedUBUNTU-CVE-2017-7811Not reported
Ubuntufirefoxdeb16.0456.0+build6-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2017-7811Not reported
Ubuntufirefoxdeb18.0456.0+build6-0ubuntu1Not reportedUBUNTU-CVE-2017-7811Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References