NVD

Id
27904  
Name
CVE-2015-7219  
Description
The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a malformed PushPromise frame that triggers decompressed-buffer length miscalculation and incorrect memory allocation.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-12-16  
Modified Date
2016-12-07  
Seq
2015-7219  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
146835 27904 CVE-2015-7219 FEDORA-2015-51b1105902  View
146836 27904 CVE-2015-7219 FEDORA-2015-7ab3d3afcf  View
146837 27904 CVE-2015-7219 openSUSE-SU-2015:2353  View
146838 27904 CVE-2015-7219 openSUSE-SU-2016:0307  View
146839 27904 CVE-2015-7219 openSUSE-SU-2016:0308  View
146840 27904 CVE-2015-7219 http://www.mozilla.org/security/announce/2015/mfsa2015-142.html  View
146841 27904 CVE-2015-7219 79280  View
146842 27904 CVE-2015-7219 1034426  View
146843 27904 CVE-2015-7219 USN-2833-1  View
146844 27904 CVE-2015-7219 https://bugzilla.mozilla.org/show_bug.cgi?id=1194820  View
146845 27904 CVE-2015-7219 GLSA-201512-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11098 JVNDB-2015-006418 Mozilla Firefox の HTTP/2 の実装におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox の HTTP/2 の実装には、サービス運用妨害 (整数アンダーフロー、表明違反、およびアプリケーションの終了) 状態にされる脆弱性が存在します。 CVE-2015-7219 84444 CVE-2015-7219 27904 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006418.html 2015-12-15 2015-12-17 View