Mozilla Produkte: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 20

• Critical 9.8
  CVE-2022-34470

  Session history navigations may have led to a use-after-free and potentially exploitable crash. This vulnerability affe…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Critical 9.8
  CVE-2022-34476

  ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malforme…

  Mozilla Firefox firefox firefox Browsers Ubuntu Alpine
  Dec 22, 2022
• Critical 9.8
  CVE-2022-34485

  Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Fire…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-2200 EPSS 24%

  If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScr…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-34468

  An iframe that was not permitted to run scripts could do so if the user clicked on a <code>javascript:</code> link. Thi…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-34469

  When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to …

  Mozilla Firefox firefox librewolf Browsers Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-34480

  Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an uninitialized pointer…

  Mozilla Firefox thunderbird firefox Browsers Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-34481

  In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have occurred when the numbe…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-34482

  An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the result…

  Mozilla Firefox firefox librewolf Browsers Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-34483

  An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the result…

  Mozilla Firefox firefox librewolf Browsers Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-34484

  The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of these bugs showed evi…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 7.5
  CVE-2022-34477

  The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however…

  Mozilla Firefox firefox librewolf Browsers Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-2226

  An OpenPGP digital signature includes information about the date when the signature was created. When displaying an ema…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-34471

  When downloading an update for an addon, the downloaded addon update's version was not verified to match the version se…

  Mozilla Firefox firefox firefox Browsers Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-34478

  The <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver content to Microsoft applic…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-34479

  A malicious website that could create a popup could have resized the popup to overlay the address bar with its own cont…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.1
  CVE-2022-34473

  The HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code>&lt;use&gt;</code> tags; however …

  Mozilla Firefox firefox librewolf Browsers Ubuntu Alpine
  Dec 22, 2022
• Medium 6.1
  CVE-2022-34474

  Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect …

  Mozilla Firefox firefox librewolf Browsers Ubuntu Alpine
  Dec 22, 2022
• Medium 6.1
  CVE-2022-34475

  SVG <code>&lt;use&gt;</code> tags that referenced a same-origin document could have resulted in script execution if att…

  Mozilla Firefox firefox firefox Browsers Ubuntu Alpine
  Dec 22, 2022
• Medium 4.3
  CVE-2022-34472

  If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022

Revision history

1. 2023-09-27 #18

   Neue Updates von Amazon aufgenommen

2. 2023-02-22 #17

   Neue Updates von Amazon aufgenommen

3. 2023-02-15 #16

   Neue Updates von Ubuntu aufgenommen

4. 2022-10-18 #15

   Neue Updates aufgenommen

5. 2022-09-26 #14

   Neue Updates von SUSE aufgenommen

6. 2022-09-15 #13

   Neue Updates von SUSE aufgenommen

7. 2022-09-14 #12

   Neue Updates von SUSE aufgenommen

8. 2022-08-14 #11

   Neue Updates von Gentoo aufgenommen

9. 2022-08-03 #10

   Neue Updates von CentOS aufgenommen

10. 2022-07-13 #9

    Neue Updates von Ubuntu aufgenommen

11. 2022-07-07 #8

    Neue Updates von Ubuntu und SUSE aufgenommen

12. 2022-07-06 #7

    Neue Updates von Oracle Linux und SUSE aufgenommen

13. 2022-07-05 #6

    Neue Updates von Oracle Linux und Ubuntu aufgenommen

14. 2022-07-04 #5

    Neue Updates von Debian aufgenommen

15. 2022-07-03 #4

    Neue Updates von Oracle Linux aufgenommen

16. 2022-06-30 #3

    Neue Updates von Red Hat und Debian aufgenommen

17. 2022-06-29 #2

    Neue Updates von Debian aufgenommen

18. 2022-06-28 #1

    Initiale Fassung

References

• Amazon Linux Security Advisory ALASFIREFOX-2023-013 vom 2023-09-27
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-013.html
• Mozilla Security Advisory MFSA2022-24 vom 2022-06-28
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-24/
• Mozilla Security Advisory MFSA2022-25 vom 2022-06-28
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-25/
• Mozilla Security Advisory MFSA2022-26 vom 2022-06-28
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-26/
• Debian Security Advisory DSA-5172 vom 2022-06-29
  https://lists.debian.org/debian-security-announce/2022/msg00140.html
• Red Hat Security Advisory RHSA-2022:5470 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5470
• Red Hat Security Advisory RHSA-2022:5474 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5474
• Red Hat Security Advisory RHSA-2022:5472 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5472
• Red Hat Security Advisory RHSA-2022:5478 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5478
• Red Hat Security Advisory RHSA-2022:5477 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5477
• Red Hat Security Advisory RHSA-2022:5469 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5469
• Red Hat Security Advisory RHSA-2022:5473 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5473
• Debian Security Advisory DLA-3064 vom 2022-07-01
  https://lists.debian.org/debian-lts-announce/2022/06/msg00026.html
• Red Hat Security Advisory RHSA-2022:5482 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5482
• Red Hat Security Advisory RHSA-2022:5481 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5481
• Red Hat Security Advisory RHSA-2022:5480 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5480
• Red Hat Security Advisory RHSA-2022:5479 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5479
• Red Hat Security Advisory RHSA-2022:5475 vom 2022-07-01
  https://access.redhat.com/errata/RHSA-2022:5475
• Oracle Linux Security Advisory ELSA-2022-5479 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-5479.html
• Oracle Linux Security Advisory ELSA-2022-5480 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-5480.html
• Oracle Linux Security Advisory ELSA-2022-5469 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-5469.html
• Oracle Linux Security Advisory ELSA-2022-5470 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-5470.html
• Debian Security Advisory DSA-5175 vom 2022-07-04
  https://lists.debian.org/debian-security-announce/2022/msg00143.html
• Oracle Linux Security Advisory ELSA-2022-5481 vom 2022-07-04
  http://linux.oracle.com/errata/ELSA-2022-5481.html
• Ubuntu Security Notice USN-5504-1 vom 2022-07-05
  https://ubuntu.com/security/notices/USN-5504-1
• Oracle Linux Security Advisory ELSA-2022-5482 vom 2022-07-04
  http://linux.oracle.com/errata/ELSA-2022-5482.html
• SUSE Security Update SUSE-SU-2022:2289-1 vom 2022-07-06
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011428.html
• SUSE Security Update SUSE-SU-2022:2279-1 vom 2022-07-06
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011411.html
• SUSE Security Update SUSE-SU-2022:2313-1 vom 2022-07-07
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/J2IIJFFLYT755HJEWZJEBRBLVJAVCHXD/
• Ubuntu Security Notice USN-5506-1 vom 2022-07-07
  https://ubuntu.com/security/notices/USN-5506-1
• SUSE Security Update SUSE-SU-2022:2320-1 vom 2022-07-07
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011467.html
• Ubuntu Security Notice USN-5512-1 vom 2022-07-14
  https://ubuntu.com/security/notices/USN-5512-1
• CentOS Security Advisory CESA-2022:5480 vom 2022-08-02
  https://lists.centos.org/pipermail/centos-announce/2022-August/073623.html
• CentOS Security Advisory CESA-2022:5479 vom 2022-08-02
  https://lists.centos.org/pipermail/centos-announce/2022-August/073622.html
• Gentoo Linux Security Advisory GLSA-202208-14 vom 2022-08-14
  https://security.gentoo.org/glsa/202208-14
• SUSE Security Update SUSE-SU-2022:3273-1 vom 2022-09-14
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012230.html
• SUSE Security Update SUSE-SU-2022:3272-1 vom 2022-09-14
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012227.html
• SUSE Security Update SUSE-SU-2022:3281-1 vom 2022-09-15
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012251.html
• SUSE Security Update SUSE-SU-2022:3396-1 vom 2022-09-26
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012383.html
• Oracle Solaris Third Party Bulletin-October 2022 vom 2022-10-18
  https://www.oracle.com/security-alerts/bulletinoct2022.html
• Ubuntu Security Notice USN-5872-1 vom 2023-02-15
  https://ubuntu.com/security/notices/USN-5872-1
• Amazon Linux Security Advisory ALAS-2023-1951 vom 2023-02-22
  https://alas.aws.amazon.com/AL2/ALAS-2023-1951.html