CVE-2019-11713: Use After Free

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1528481
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-23/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-28/
• http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html
• http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html
• https://lists.debian.org/debian-lts-announce/2019/08/msg00001.html
• https://lists.debian.org/debian-lts-announce/2019/08/msg00002.html
• https://security.gentoo.org/glsa/201908-12
• https://security.gentoo.org/glsa/201908-20
• https://www.mozilla.org/security/advisories/mfsa2019-21/
• https://www.mozilla.org/security/advisories/mfsa2019-22/
• https://www.mozilla.org/security/advisories/mfsa2019-23/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2019-23
• MFSA2019-28
• MFSA2019-22
• MFSA2019-21

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-9811
• CVE-2019-11711
• CVE-2019-11712
• CVE-2019-11713
• CVE-2019-11729
• CVE-2019-11715
• CVE-2019-11717
• CVE-2019-11719
• CVE-2019-11730
• CVE-2019-11709
• CVE-2019-11714
• CVE-2019-11716
• CVE-2019-11720
• CVE-2019-11721
• CVE-2019-11723
• CVE-2019-11724
• CVE-2019-11725
• CVE-2019-11727
• CVE-2019-11728
• CVE-2019-11710
• CVE-2019-11718

Frequently Asked Questions

• What is CVE-2019-11713?

  CVE-2019-11713 is a use-after-free vulnerability in HTTP/2 that can result in a potentially exploitable crash.

• Which software products are affected by CVE-2019-11713?

  CVE-2019-11713 affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

• How severe is CVE-2019-11713?

  CVE-2019-11713 has a severity rating of 9.8 (Critical).

• How can I fix CVE-2019-11713?

  To fix CVE-2019-11713, you should update Firefox ESR to version 60.8 or later, update Firefox to version 68 or later, and update Thunderbird to version 60.8 or later.

• Where can I find more information about CVE-2019-11713?

  You can find more information about CVE-2019-11713 on the Mozilla Bugzilla and Mozilla Security Advisories websites.