CVE-2017-5754
firefox: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized di...
CVE-2017-5754 is fixed in 4 products on 1 platform, first by firefox 59.0.1+build1-0ubuntu1, released June 11, 2018. It is not reported as exploited. Patch Radar priority: Urgent.
Urgent
CVSS
n/a
Critical
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.6741
99th percentile
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| firefox · Ubuntu 18.04.6 LTS (bionic) | 59.0.1+build1-0ubuntu1 | firefox 59.0.1+build1-0ubuntu1 | Jun 11, 2018 |
| firefox-globalmenu · Ubuntu 18.04.6 LTS (bionic) | 59.0.1+build1-0ubuntu1 | firefox-globalmenu 59.0.1+build1-0ubuntu1 | Jun 11, 2018 |
| firefox-mozsymbols · Ubuntu 18.04.6 LTS (bionic) | 59.0.1+build1-0ubuntu1 | firefox-mozsymbols 59.0.1+build1-0ubuntu1 | Jun 11, 2018 |
| firefox-testsuite · Ubuntu 18.04.6 LTS (bionic) | 59.0.1+build1-0ubuntu1 | firefox-testsuite 59.0.1+build1-0ubuntu1 | Jun 11, 2018 |