Summary
Several security issues were discovered in the SpiderMonkey JavaScript
library. If a user were tricked into opening malicious JavaScript
applications or processing malformed data, a remote attacker could exploit
a variety of issues related to JavaScript security, including denial of
service attacks, and arbitrary code execution.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | mozjs102 | 102.11.0-0ubuntu0.22.04.1 |
Vulnerabilities 9
-
High 8.8
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in …
-
High 8.8
Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-fr…
-
High 8.8
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruptio…
-
Medium 6.5
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affe…
-
Unscored —
Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorr…
-
Unscored —
Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resu…
-
Unscored —
An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, res…
-
Unscored —
A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox < 113, Firefox ES…
-
Unscored —
Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCr…
References
-
report
https://ubuntu.com/security/CVE-2023-25735
-
report
https://ubuntu.com/security/CVE-2023-25739
-
report
https://ubuntu.com/security/CVE-2023-25751
-
report
https://ubuntu.com/security/CVE-2023-29535
-
report
https://ubuntu.com/security/CVE-2023-29536
-
report
https://ubuntu.com/security/CVE-2023-29548
-
report
https://ubuntu.com/security/CVE-2023-29550
-
report
https://ubuntu.com/security/CVE-2023-32211
-
report
https://ubuntu.com/security/CVE-2023-32215