{
  "fix": "firefox 56.0\u002Bbuild6-0ubuntu1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-56.0-build6-0ubuntu1",
  "summary": "firefox 56.0\u002Bbuild6-0ubuntu1, released October 1, 2017, fixes 16 CVEs in firefox. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "firefox 56.0\u002Bbuild6-0ubuntu1 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2017-10-01T17:00:00Z",
  "priority": "Routine",
  "priorityTier": 4,
  "priorityReason": "Closes 16 CVEs, none high severity",
  "supported": false,
  "cveCount": 16,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.03523,
  "appliesTo": [
    {
      "product": "firefox",
      "productUrl": "https://patchblox.com/security/product/linux/firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "56.0\u002Bbuild6-0ubuntu1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2017-7824",
      "url": "https://patchblox.com/security/cve/CVE-2017-7824",
      "title": "firefox: A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7818",
      "url": "https://patchblox.com/security/cve/CVE-2017-7818",
      "title": "firefox: A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) ele...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03309,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7819",
      "url": "https://patchblox.com/security/cve/CVE-2017-7819",
      "title": "firefox: A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during t...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03309,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7805",
      "url": "https://patchblox.com/security/cve/CVE-2017-7805",
      "title": "firefox: During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0305,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7810",
      "url": "https://patchblox.com/security/cve/CVE-2017-7810",
      "title": "firefox: Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02797,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7811",
      "url": "https://patchblox.com/security/cve/CVE-2017-7811",
      "title": "firefox: Memory safety bugs were reported in Firefox 55",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02269,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7793",
      "url": "https://patchblox.com/security/cve/CVE-2017-7793",
      "title": "firefox: A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when sti...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02267,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7821",
      "url": "https://patchblox.com/security/cve/CVE-2017-7821",
      "title": "firefox: A vulnerability where WebExtensions can download and attempt to open a file of some non-executable file types",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01911,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7813",
      "url": "https://patchblox.com/security/cve/CVE-2017-7813",
      "title": "firefox: Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01564,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7823",
      "url": "https://patchblox.com/security/cve/CVE-2017-7823",
      "title": "firefox: The content security policy (CSP) \u0022sandbox\u0022 directive did not create a unique origin for the document, causing it to...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01439,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7822",
      "url": "https://patchblox.com/security/cve/CVE-2017-7822",
      "title": "firefox: The AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length of 1 according to the...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01334,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7812",
      "url": "https://patchblox.com/security/cve/CVE-2017-7812",
      "title": "firefox: If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that ot...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7816",
      "url": "https://patchblox.com/security/cve/CVE-2017-7816",
      "title": "firefox-mozsymbols: WebExtensions could use popups and panels in the extension UI to load an \u0022about:\u0022 privileged URL, violating security...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7814",
      "url": "https://patchblox.com/security/cve/CVE-2017-7814",
      "title": "firefox: File downloads encoded with \u0022blob:\u0022 and \u0022data:\u0022 URL elements bypassed normal file download checks though the Phishing...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7820",
      "url": "https://patchblox.com/security/cve/CVE-2017-7820",
      "title": "firefox: The \u0022instanceof\u0022 operator can bypass the Xray wrapper mechanism",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7815",
      "url": "https://patchblox.com/security/cve/CVE-2017-7815",
      "title": "firefox: On pages containing an iframe, the \u0022data:\u0022 protocol can be used to create a modal dialog through Javascript that will...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}