Mozilla Firefox und Mozilla Firefox ESR: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 8

• Critical 9.8
  CVE-2022-36320

  Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs …

  Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-2505

  Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 7.5
  CVE-2022-36319

  When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates th…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-36317

  When visiting a website with an overly long URL, the user interface would start to hang. Due to session restore, this c…

  Mozilla Firefox firefox librewolf Browsers Alpine
  Dec 22, 2022
• Medium 6.1
  CVE-2022-36316

  When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus l…

  Mozilla Firefox thunderbird firefox Browsers Ubuntu Alpine
  Dec 22, 2022
• Medium 5.5
  CVE-2022-36314

  When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to un…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu Alpine
  Dec 22, 2022
• Medium 5.3
  CVE-2022-36318

  When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerabilit…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 4.3
  CVE-2022-36315

  When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of pre…

  Mozilla Firefox thunderbird firefox Browsers Ubuntu Alpine
  Dec 22, 2022

Revision history

1. 2024-07-10 #12

   Neue Updates von Amazon aufgenommen

2. 2023-09-27 #11

   Neue Updates von Amazon aufgenommen

3. 2022-10-18 #10

   Neue Updates aufgenommen

4. 2022-09-26 #9

   Neue Updates von SUSE aufgenommen

5. 2022-09-14 #8

   Neue Updates von SUSE aufgenommen

6. 2022-08-07 #7

   Neue Updates von CentOS aufgenommen

7. 2022-08-02 #6

   Neue Updates von Oracle Linux aufgenommen

8. 2022-08-01 #5

   Neue Updates von Red Hat und SUSE aufgenommen

9. 2022-07-31 #4

   Neue Updates von SUSE aufgenommen

10. 2022-07-28 #3

    Neue Updates von Ubuntu aufgenommen

11. 2022-07-27 #2

    Neue Updates von Debian aufgenommen

12. 2022-07-26 #1

    Initiale Fassung

References

• Mozilla Security Advisory vom 2022-07-26
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-28/
• Mozilla Security Advisory vom 2022-07-26
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-29/
• Mozilla Security Advisory vom 2022-07-26
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-30/
• Debian Security Advisory DSA-5193 vom 2022-07-27
  https://lists.debian.org/debian-security-announce/2022/msg00162.html
• Ubuntu Security Notice USN-5536-1 vom 2022-07-28
  https://ubuntu.com/security/notices/USN-5536-1
• SUSE Security Update SUSE-SU-2022:2602-1 vom 2022-07-29
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011714.html
• SUSE Security Update SUSE-SU-2022:2596-1 vom 2022-07-29
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011719.html
• Red Hat Security Advisory RHSA-2022:5767 vom 2022-08-01
  https://access.redhat.com/errata/RHSA-2022:5767
• Red Hat Security Advisory RHSA-2022:5776 vom 2022-08-01
  https://access.redhat.com/errata/RHSA-2022:5776
• Red Hat Security Advisory RHSA-2022:5777 vom 2022-08-01
  https://access.redhat.com/errata/RHSA-2022:5777
• Red Hat Security Advisory RHSA-2022:5769 vom 2022-08-01
  https://access.redhat.com/errata/RHSA-2022:5769
• Red Hat Security Advisory RHSA-2022:5766 vom 2022-08-01
  https://access.redhat.com/errata/RHSA-2022:5766
• SUSE Security Update SUSE-SU-2022:2611-1 vom 2022-08-01
  https://lists.suse.com/pipermail/sle-security-updates/2022-August/011731.html
• Red Hat Security Advisory RHSA-2022:5765 vom 2022-08-01
  https://access.redhat.com/errata/RHSA-2022:5765
• Oracle Linux Security Advisory ELSA-2022-5767 vom 2022-08-02
  http://linux.oracle.com/errata/ELSA-2022-5767.html
• Oracle Linux Security Advisory ELSA-2022-5776 vom 2022-08-02
  http://linux.oracle.com/errata/ELSA-2022-5776.html
• Oracle Linux Security Advisory ELSA-2022-5777 vom 2022-08-03
  http://linux.oracle.com/errata/ELSA-2022-5777.html
• CentOS Security Advisory CESA-2022:5776 vom 2022-08-04
  https://lists.centos.org/pipermail/centos-announce/2022-August/073625.html
• SUSE Security Update SUSE-SU-2022:3272-1 vom 2022-09-14
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012227.html
• SUSE Security Update SUSE-SU-2022:3273-1 vom 2022-09-14
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012230.html
• SUSE Security Update SUSE-SU-2022:3396-1 vom 2022-09-26
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012383.html
• Oracle Solaris Third Party Bulletin-October 2022 vom 2022-10-18
  https://www.oracle.com/security-alerts/bulletinoct2022.html
• Amazon Linux Security Advisory ALASFIREFOX-2023-012 vom 2023-09-27
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-012.html
• Amazon Linux Security Advisory ALASFIREFOX-2024-026 vom 2024-07-10
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2024-026.html