CVE:CVE-2019-17021
CNNVD:CNNVD-202001-225
Mozilla Firefox ESR是美国Mozilla基金会的Firefox(Web浏览器)的一个延长支持版本。
Mozilla Firefox ESR 68.4之前版本和Mozilla Firefox 72之前版本中存在竞争条件问题漏洞。攻击者可利用该漏洞获取父进程中的堆地址。
solution:Upgrade mozilla firefox to a higher version than 72.0,and avoid the version (,72.0); Upgrade mozilla firefox_esr to a higher version than 68.4,and avoid the version (,68.4); Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1