PT-2019-5227 · Mozilla+6 · Firefox+6

Published 2019-12-03 · Updated 2024-12-12 · CVE-2019-17023

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 72

Description The issue is related to an error in the HelloRetryRequest extension, where a client can negotiate a protocol lower than TLS 1.3. This can lead to an invalid state transition in the TLS State Machine. If the client enters this state, incoming Application Data records will be ignored. A remote attacker can exploit this issue to impact data integrity.

Recommendations For Firefox versions prior to 72, update to version 72 or later to resolve the issue.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

ALT-PU-2020-1109

ALT-PU-2020-1110

ALT-PU-2020-1616

ALT-PU-2020-1617

ALT-PU-2020-2408

ALT-PU-2020-2933

ALT-PU-2021-1368

BDU:2020-01970

CESA-2020_3280

CESA-2020_4076

CVE-2019-17023

DSA-4726-1

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

RHSA-2020:3280

RHSA-2020:4076

RHSA-2020_3280

RHSA-2020_4076

RLSA-2020:3280

USN-4234-1

USN-4234-2

USN-4397-1

Affected Products

Alt Linux

Centos

Firefox

Linuxmint

Red Hat

Rocky Linux

Ubuntu

References · 1923

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_jit_use_after_free.rb · Exploit
• 🔥 https://github.com/maxpl0it/CVE-2019-17026-Exploit · Exploit
• 🔥 https://github.com/aleksejspopovs/cve-2020-16012 · Exploit
• 🔥 https://github.com/lsw29475/CVE-2019-17026 · Exploit
• 🔥 https://github.com/rojhack/CVE-2020-6514 · Exploit
• 🔥 https://github.com/HassanAzze/CVE-2020-6514 · Exploit
• 🔥 https://github.com/hasan-khalil/CVE-2020-6514 · Exploit
• 🔥 https://github.com/R0jhack/CVE-2020-6514 · Exploit
• 🔥❌ https://github.com/marcinguy/CVE-2020-15999 · Exploit, Deleted
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-12399 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-17025 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01970 · Security Note
• https://cve.org/CVERecord?id=CVE-2019-17023 · Security Note
• https://mozilla.org/security/advisories/mfsa2020-01 · Vendor Advisory