CVE-2019-9809
firefox: If the source for resources on a page is through an FTP connection, it is possible to trigger a series of modal alert...
CVE-2019-9809 is fixed in 4 products on 1 platform, first by firefox 66.0+build3-0ubuntu0.18.04.1, released March 19, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0164
76th percentile
If the source for resources on a page is through an FTP connection, it is possible to trigger a series of modal alert messages for these resources through invalid credentials or locations. These messages cannot be immediately dismissed, allowing for a denial of service (DOS) attack. This vulnerability affects Firefox < 66.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| firefox · Ubuntu 18.04.6 LTS (bionic) | 66.0+build3-0ubuntu0.18.04.1 | firefox 66.0+build3-0ubuntu0.18.04.1 | Mar 19, 2019 |
| firefox-globalmenu · Ubuntu 18.04.6 LTS (bionic) | 66.0+build3-0ubuntu0.18.04.1 | firefox-globalmenu 66.0+build3-0ubuntu0.18.04.1 | Mar 19, 2019 |
| firefox-mozsymbols · Ubuntu 18.04.6 LTS (bionic) | 66.0+build3-0ubuntu0.18.04.1 | firefox-mozsymbols 66.0+build3-0ubuntu0.18.04.1 | Mar 19, 2019 |
| firefox-testsuite · Ubuntu 18.04.6 LTS (bionic) | 66.0+build3-0ubuntu0.18.04.1 | firefox-testsuite 66.0+build3-0ubuntu0.18.04.1 | Mar 19, 2019 |