Mozilla Firefox und Thunderbird: Mehrere Schwachstellen ermöglichen Codeausführung

Summary

Product

Vulnerabilities 14

• Critical 9.8
  CVE-2022-31736

  A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerab…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Critical 9.8
  CVE-2022-31737

  A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially e…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Critical 9.8
  CVE-2022-31747

  Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs prese…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Critical 9.8
  CVE-2022-31748

  Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported …

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-31739

  When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly bei…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-31740

  On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-31741

  A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-1834

  When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multipl…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-31738

  When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resultin…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-31742

  An attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting the…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-31743

  Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. T…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-31744

  An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so b…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 4.3
  CVE-2022-31745

  If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulner…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Alpine
  Dec 22, 2022
• Unscored —
  CVE-2022-1919

  Use after free in Codecs in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap …

  Google Chrome mozjs38 mozjs52 Browsers Ubuntu Alpine
  Jul 28, 2022

Revision history

1. 2024-07-10 #23

   Neue Updates von Amazon aufgenommen

2. 2023-09-27 #22

   Neue Updates von Amazon aufgenommen

3. 2023-08-09 #21

   Neue Updates von Fedora aufgenommen

4. 2022-10-18 #20

   Neue Updates aufgenommen

5. 2022-09-15 #19

   Neue Updates von SUSE aufgenommen

6. 2022-09-01 #18

   Neue Updates von SUSE aufgenommen

7. 2022-08-14 #17

   Neue Updates von Gentoo aufgenommen

8. 2022-08-03 #16

   Neue Updates von CentOS aufgenommen

9. 2022-07-31 #15

   Neue Updates von SUSE aufgenommen

10. 2022-07-24 #14

    Neue Updates von SUSE aufgenommen

11. 2022-07-20 #13

    Neue Updates von Amazon aufgenommen

12. 2022-07-13 #12

    Neue Updates von Ubuntu aufgenommen

13. 2022-07-06 #11

    Neue Updates von SUSE und Oracle Linux aufgenommen

14. 2022-07-05 #10

    Neue Updates von Oracle Linux aufgenommen

15. 2022-07-03 #9

    Neue Updates von Oracle Linux aufgenommen

16. 2022-06-30 #8

    Neue Updates von Red Hat und Debian aufgenommen

17. 2022-06-27 #7

    Neue Updates von Ubuntu aufgenommen

18. 2022-06-13 #6

    Neue Updates von SUSE und Ubuntu aufgenommen

19. 2022-06-09 #5

    Neue Updates von SUSE aufgenommen

20. 2022-06-06 #4

    Neue Updates von Red Hat, Debian und Oracle Linux aufgenommen

21. 2022-06-02 #3

    Neue Updates von SUSE, Red Hat und Oracle Linux aufgenommen

22. 2022-06-01 #2

    Neue Updates von Red Hat, Fedora und Debian aufgenommen

23. 2022-05-31 #1

    Initiale Fassung

References

• Mozilla Foundation Security Advisory vom 2022-05-31
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-20/
• Mozilla Foundation Security Advisory vom 2022-05-31
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-21/
• Mozilla Foundation Security Advisory vom 2022-05-31
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-22/
• Red Hat Security Advisory RHSA-2022:4870 vom 2022-06-02
  https://access.redhat.com/errata/RHSA-2022:4870
• Red Hat Security Advisory RHSA-2022:4871 vom 2022-06-02
  https://access.redhat.com/errata/RHSA-2022:4871
• Red Hat Security Advisory RHSA-2022:4872 vom 2022-06-02
  https://access.redhat.com/errata/RHSA-2022:4872
• Red Hat Security Advisory RHSA-2022:4873 vom 2022-06-02
  https://access.redhat.com/errata/RHSA-2022:4873
• Red Hat Security Advisory RHSA-2022:4876 vom 2022-06-02
  https://access.redhat.com/errata/RHSA-2022:4876
• Red Hat Security Advisory RHSA-2022:4875 vom 2022-06-02
  https://access.redhat.com/errata/RHSA-2022:4875
• Debian Security Advisory DSA-5156 vom 2022-06-01
  https://lists.debian.org/debian-security-announce/2022/msg00124.html
• SUSE Security Update SUSE-SU-2022:1920-1 vom 2022-06-02
  https://lists.suse.com/pipermail/sle-security-updates/2022-June/011224.html
• SUSE Security Update SUSE-SU-2022:1921-1 vom 2022-06-02
  https://lists.suse.com/pipermail/sle-security-updates/2022-June/011223.html
• Red Hat Security Advisory RHSA-2022:4889 vom 2022-06-03
  https://access.redhat.com/errata/RHSA-2022:4889
• Red Hat Security Advisory RHSA-2022:4891 vom 2022-06-03
  https://access.redhat.com/errata/RHSA-2022:4891
• SUSE Security Update SUSE-SU-2022:1927-1 vom 2022-06-02
  https://lists.suse.com/pipermail/sle-security-updates/2022-June/011229.html
• Oracle Linux Security Advisory ELSA-2022-4870 vom 2022-06-02
  http://linux.oracle.com/errata/ELSA-2022-4870.html
• Oracle Linux Security Advisory ELSA-2022-4872 vom 2022-06-02
  http://linux.oracle.com/errata/ELSA-2022-4872.html
• Red Hat Security Advisory RHSA-2022:4892 vom 2022-06-03
  https://access.redhat.com/errata/RHSA-2022:4892
• Red Hat Security Advisory RHSA-2022:4887 vom 2022-06-03
  https://access.redhat.com/errata/RHSA-2022:4887
• Red Hat Security Advisory RHSA-2022:4888 vom 2022-06-03
  https://access.redhat.com/errata/RHSA-2022:4888
• Red Hat Security Advisory RHSA-2022:4890 vom 2022-06-03
  https://access.redhat.com/errata/RHSA-2022:4890
• Debian Security Advisory DLA-3040 vom 2022-06-03
  https://lists.debian.org/debian-lts-announce/2022/06/msg00002.html
• Oracle Linux Security Advisory ELSA-2022-4887 vom 2022-06-06
  https://linux.oracle.com/errata/ELSA-2022-4887.html
• Debian Security Advisory DLA-3041 vom 2022-06-03
  https://lists.debian.org/debian-lts-announce/2022/06/msg00003.html
• Debian Security Advisory DSA-5158 vom 2022-06-04
  https://lists.debian.org/debian-security-announce/2022/msg00126.html
• Oracle Linux Security Advisory ELSA-2022-4891 vom 2022-06-03
  http://linux.oracle.com/errata/ELSA-2022-4891.html
• SUSE Security Update SUSE-SU-2022:2031-1 vom 2022-06-09
  https://lists.suse.com/pipermail/sle-security-updates/2022-June/011255.html
• SUSE Security Update SUSE-SU-2022:2062-1 vom 2022-06-13
  https://lists.suse.com/pipermail/sle-security-updates/2022-June/011274.html
• Ubuntu Security Notice USN-5475-1 vom 2022-06-13
  https://ubuntu.com/security/notices/USN-5475-1
• Ubuntu Security Notice USN-5494-1 vom 2022-06-27
  https://ubuntu.com/security/notices/USN-5494-1
• Red Hat Security Advisory RHSA-2022:5475 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5475
• Red Hat Security Advisory RHSA-2022:5473 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5473
• Red Hat Security Advisory RHSA-2022:5469 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5469
• Red Hat Security Advisory RHSA-2022:5477 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5477
• Red Hat Security Advisory RHSA-2022:5478 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5478
• Red Hat Security Advisory RHSA-2022:5470 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5470
• Red Hat Security Advisory RHSA-2022:5472 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5472
• Debian Security Advisory DLA-3064 vom 2022-07-01
  https://lists.debian.org/debian-lts-announce/2022/06/msg00026.html
• Red Hat Security Advisory RHSA-2022:5482 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5482
• Red Hat Security Advisory RHSA-2022:5481 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5481
• Red Hat Security Advisory RHSA-2022:5480 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5480
• Red Hat Security Advisory RHSA-2022:5479 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5479
• Oracle Linux Security Advisory ELSA-2022-4892 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-4892.html
• Oracle Linux Security Advisory ELSA-2022-4873 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-4873.html
• Oracle Linux Security Advisory ELSA-2022-5470 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-5470.html
• Oracle Linux Security Advisory ELSA-2022-5480 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-5480.html
• Oracle Linux Security Advisory ELSA-2022-5479 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-5479.html
• Oracle Linux Security Advisory ELSA-2022-5469 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-5469.html
• Oracle Linux Security Advisory ELSA-2022-5481 vom 2022-07-04
  http://linux.oracle.com/errata/ELSA-2022-5481.html
• SUSE Security Update SUSE-SU-2022:2289-1 vom 2022-07-06
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011428.html
• Oracle Linux Security Advisory ELSA-2022-5482 vom 2022-07-04
  http://linux.oracle.com/errata/ELSA-2022-5482.html
• SUSE Security Update SUSE-SU-2022:2279-1 vom 2022-07-06
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011411.html
• SUSE Security Update SUSE-SU-2022:2313-1 vom 2022-07-07
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/J2IIJFFLYT755HJEWZJEBRBLVJAVCHXD/
• Ubuntu Security Notice USN-5512-1 vom 2022-07-14
  https://ubuntu.com/security/notices/USN-5512-1
• Amazon Linux Security Advisory ALAS-2022-1828 vom 2022-07-21
  https://alas.aws.amazon.com/AL2/ALAS-2022-1828.html
• SUSE Security Update SUSE-SU-2022:2533-1 vom 2022-07-22
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011637.html
• SUSE Security Update SUSE-SU-2022:2595-1 vom 2022-07-29
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011716.html
• CentOS Security Advisory CESA-2022:5479 vom 2022-08-02
  https://lists.centos.org/pipermail/centos-announce/2022-August/073622.html
• CentOS Security Advisory CESA-2022:4870 vom 2022-08-02
  https://lists.centos.org/pipermail/centos-announce/2022-August/073621.html
• CentOS Security Advisory CESA-2022:4891 vom 2022-08-02
  https://lists.centos.org/pipermail/centos-announce/2022-August/073624.html
• CentOS Security Advisory CESA-2022:5480 vom 2022-08-02
  https://lists.centos.org/pipermail/centos-announce/2022-August/073623.html
• Gentoo Linux Security Advisory GLSA-202208-14 vom 2022-08-14
  https://security.gentoo.org/glsa/202208-14
• SUSE Security Update SUSE-SU-2022:2533-2 vom 2022-09-01
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012046.html
• SUSE Security Update SUSE-SU-2022:3281-1 vom 2022-09-15
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012251.html
• Oracle Solaris Third Party Bulletin-October 2022 vom 2022-10-18
  https://www.oracle.com/security-alerts/bulletinoct2022.html
• Fedora Security Advisory FEDORA-2023-6C8DE2CD15 vom 2023-08-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-6c8de2cd15
• Amazon Linux Security Advisory ALASFIREFOX-2023-011 vom 2023-09-27
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-011.html
• Amazon Linux Security Advisory ALASFIREFOX-2024-026 vom 2024-07-10
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2024-026.html