CVE-2017-7776

Upstream information

CVE-2017-7776 at MITRE

Description

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

---

SUSE information

CVSS v2 Scores

	SUSE
Base Score	5.76
Vector	AV:N/AC:M/Au:N/C:P/I:N/A:P
Access Vector	Network
Access Complexity	Medium
Authentication	None
Confidentiality Impact	Partial
Integrity Impact	None
Availability Impact	Partial

CVSS v3 Scores

	SUSE
Base Score	6.5
Vector	AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Access Vector	Network
Access Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality Impact	Low
Integrity Impact	None
Availability Impact	Low

SUSE Bugzilla entries: 1043960 [NEW], 1044239 [RESOLVED / ], 1044240 [RESOLVED / ], 1044241 [RESOLVED / ], 1044242 [RESOLVED / ]

SUSE Security Advisories:

• openSUSE-SU-2017:1579-1, published Fri, 16 Jun 2017 15:10:17 +0200 (CEST)
• openSUSE-SU-2017:1620-1, published Tue, 20 Jun 2017 00:09:32 +0200 (CEST)

List of released packages

Product(s)	Fixed package version(s)	References
openSUSE Leap 42.2	MozillaFirefox >= 52.2-57.12.2 MozillaFirefox-branding-upstream >= 52.2-57.12.2 MozillaFirefox-buildsymbols >= 52.2-57.12.2 MozillaFirefox-debuginfo >= 52.2-57.12.2 MozillaFirefox-debugsource >= 52.2-57.12.2 MozillaFirefox-devel >= 52.2-57.12.2 MozillaFirefox-translations-common >= 52.2-57.12.2 MozillaFirefox-translations-other >= 52.2-57.12.2 MozillaThunderbird >= 52.2-41.9.2 MozillaThunderbird-buildsymbols >= 52.2-41.9.2 MozillaThunderbird-debuginfo >= 52.2-41.9.2 MozillaThunderbird-debugsource >= 52.2-41.9.2 MozillaThunderbird-devel >= 52.2-41.9.2 MozillaThunderbird-translations-common >= 52.2-41.9.2 MozillaThunderbird-translations-other >= 52.2-41.9.2 java-1_8_0-openjdk >= 1.8.0.131-10.10.3 java-1_8_0-openjdk-accessibility >= 1.8.0.131-10.10.3 java-1_8_0-openjdk-debuginfo >= 1.8.0.131-10.10.3 java-1_8_0-openjdk-debugsource >= 1.8.0.131-10.10.3 java-1_8_0-openjdk-demo >= 1.8.0.131-10.10.3 java-1_8_0-openjdk-demo-debuginfo >= 1.8.0.131-10.10.3 java-1_8_0-openjdk-devel >= 1.8.0.131-10.10.3 java-1_8_0-openjdk-devel-debuginfo >= 1.8.0.131-10.10.3 java-1_8_0-openjdk-headless >= 1.8.0.131-10.10.3 java-1_8_0-openjdk-headless-debuginfo >= 1.8.0.131-10.10.3 java-1_8_0-openjdk-javadoc >= 1.8.0.131-10.10.3 java-1_8_0-openjdk-src >= 1.8.0.131-10.10.3 libfreebl3 >= 3.28.5-40.6.1 libfreebl3-32bit >= 3.28.5-40.6.1 libfreebl3-debuginfo >= 3.28.5-40.6.1 libfreebl3-debuginfo-32bit >= 3.28.5-40.6.1 libsoftokn3 >= 3.28.5-40.6.1 libsoftokn3-32bit >= 3.28.5-40.6.1 libsoftokn3-debuginfo >= 3.28.5-40.6.1 libsoftokn3-debuginfo-32bit >= 3.28.5-40.6.1 mozilla-nss >= 3.28.5-40.6.1 mozilla-nss-32bit >= 3.28.5-40.6.1 mozilla-nss-certs >= 3.28.5-40.6.1 mozilla-nss-certs-32bit >= 3.28.5-40.6.1 mozilla-nss-certs-debuginfo >= 3.28.5-40.6.1 mozilla-nss-certs-debuginfo-32bit >= 3.28.5-40.6.1 mozilla-nss-debuginfo >= 3.28.5-40.6.1 mozilla-nss-debuginfo-32bit >= 3.28.5-40.6.1 mozilla-nss-debugsource >= 3.28.5-40.6.1 mozilla-nss-devel >= 3.28.5-40.6.1 mozilla-nss-sysinit >= 3.28.5-40.6.1 mozilla-nss-sysinit-32bit >= 3.28.5-40.6.1 mozilla-nss-sysinit-debuginfo >= 3.28.5-40.6.1 mozilla-nss-sysinit-debuginfo-32bit >= 3.28.5-40.6.1 mozilla-nss-tools >= 3.28.5-40.6.1 mozilla-nss-tools-debuginfo >= 3.28.5-40.6.1	Patchnames: openSUSE-2017-712