Summary
Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information, trick a user into accepting unwanted permissions, or execute
arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | firefox | 91.0+build2-0ubuntu0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | firefox | 91.0+build2-0ubuntu0.20.04.1 |
Vulnerabilities 10
-
Unscored —
Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potent…
-
Unscored —
An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failure…
-
Unscored —
Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the pote…
-
Unscored —
Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered d…
-
Unscored —
A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable cras…
-
Unscored —
A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note…
-
Unscored —
After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be dis…
-
Unscored —
Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memor…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed e…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 90. Some of these bugs showed e…
References
-
report
https://ubuntu.com/security/CVE-2021-29980
-
report
https://ubuntu.com/security/CVE-2021-29981
-
report
https://ubuntu.com/security/CVE-2021-29982
-
report
https://ubuntu.com/security/CVE-2021-29984
-
report
https://ubuntu.com/security/CVE-2021-29985
-
report
https://ubuntu.com/security/CVE-2021-29986
-
report
https://ubuntu.com/security/CVE-2021-29987
-
report
https://ubuntu.com/security/CVE-2021-29988
-
report
https://ubuntu.com/security/CVE-2021-29989
-
report
https://ubuntu.com/security/CVE-2021-29990