Summary
Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information across domains, or execute arbitrary code. (CVE-2023-5169,
CVE-2023-5170, CVE-2023-5171, CVE-2023-5172, CVE-2023-5175, CVE-2023-5176)
Ronald Crane discovered that Firefox did not properly manage memory when
non-HTTPS Alternate Services (network.http.altsvc.oe) is enabled. An
attacker could potentially exploit this issue to cause a denial of service.
(CVE-2023-5173)
Clément Lecigne discovered that Firefox did not properly manage memory when
handling VP8 media stream. An attacker-controlled VP8 media stream could
lead to a heap buffer overflow in the content process, resulting in a
denial of service, or possibly execute arbitrary code. (CVE-2023-5217)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | firefox | 118.0.1+build1-0ubuntu0.20.04.1 |
Vulnerabilities 8
-
High 8.8
Electron affected by libvpx's heap buffer overflow in vp8 encoding
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
KEV Oct 2, 2023 -
Critical 9.8
A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential…
-
Critical 9.8
During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed f…
-
Critical 9.8
Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence…
-
Unscored —
A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds wri…
-
Unscored —
In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a mem…
-
Unscored —
During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to…
-
Unscored —
In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly …
References
-
report
https://ubuntu.com/security/CVE-2023-5169
-
report
https://ubuntu.com/security/CVE-2023-5170
-
report
https://ubuntu.com/security/CVE-2023-5171
-
report
https://ubuntu.com/security/CVE-2023-5172
-
report
https://ubuntu.com/security/CVE-2023-5173
-
report
https://ubuntu.com/security/CVE-2023-5175
-
report
https://ubuntu.com/security/CVE-2023-5176
-
report
https://ubuntu.com/security/CVE-2023-5217