CVE-2020-6792: Medium severity Mozilla Thunderbird vulnerability
Last updated 24 July 2024
Other sources
When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 68.5 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:115.12.0-1~deb11u1Fixed in 1:128.10.0esr-1~deb11u1Fixed in 1:128.8.0esr-1~deb12u1Fixed in 1:128.10.0esr-1~deb12u1Fixed in 1:128.9.0esr-1Fixed in 1:128.10.0esr-1 - Upgrade
Upgrade
Mozilla Thunderbirdto a version that resolves this vulnerability.Fixed in 68.5
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2020-6792?
CVE-2020-6792 is a vulnerability in Thunderbird email client, where uninitialized memory was used when deriving an identifier for an email message.
Which software is affected by CVE-2020-6792?
Thunderbird versions earlier than 68.5 are affected by CVE-2020-6792.
What is the severity of CVE-2020-6792?
CVE-2020-6792 has a severity of 4.3, which is considered medium.
How can I fix CVE-2020-6792?
To fix CVE-2020-6792, update Thunderbird to version 68.5 or higher.
Where can I find more information about CVE-2020-6792?
You can find more information about CVE-2020-6792 on the Mozilla Bugzilla, Mozilla Security Advisories, and Gentoo Security websites.