Mozilla Firefox und Mozilla Firefox ESR: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 8

• High 8.8
  CVE-2022-40962

  Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team report…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-40957

  Inconsistent data in instruction and data cache when creating wasm code could lead to a potentially exploitable crash.<…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-40958

  By injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-40959

  During iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a bypass that lea…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-40960

  Concurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a use-after-free causing a…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-40961

  During startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow causing a potentially e…

  Mozilla Firefox Browsers
  Dec 22, 2022
• Medium 6.1
  CVE-2022-40956

  When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected ele…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 5.5
  CVE-2022-3266

  An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash. This vulnera…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022

Revision history

1. 2023-09-27 #12

   Neue Updates von Amazon aufgenommen

2. 2023-01-01 #11

   Neue CVE aufgenommen

3. 2022-11-20 #10

   Neue Updates von XEROX aufgenommen

4. 2022-10-26 #9

   Neue Updates von Oracle Linux aufgenommen

5. 2022-10-18 #8

   Neue Updates aufgenommen

6. 2022-10-03 #7

   Neue Updates von Ubuntu aufgenommen

7. 2022-09-29 #6

   Neue Updates von Gentoo aufgenommen

8. 2022-09-28 #5

   Neue Updates von Oracle Linux aufgenommen

9. 2022-09-27 #4

   Neue Updates von SUSE aufgenommen

10. 2022-09-26 #3

    Neue Updates von Red Hat, SUSE und Debian aufgenommen

11. 2022-09-22 #2

    Neue Updates von Debian aufgenommen

12. 2022-09-20 #1

    Initiale Fassung

References

• Amazon Linux Security Advisory ALASFIREFOX-2023-013 vom 2023-09-27
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-013.html
• Mozilla Security Advisory vom 2022-09-20
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-40/
• Mozilla Security Advisory vom 2022-09-20
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-41/
• Debian Security Advisory DSA-5237 vom 2022-09-23
  https://lists.debian.org/debian-security-announce/2022/msg00206.html
• Red Hat Security Advisory RHSA-2022:6701 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6701
• Red Hat Security Advisory RHSA-2022:6700 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6700
• Red Hat Security Advisory RHSA-2022:6702 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6702
• Red Hat Security Advisory RHSA-2022:6707 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6707
• Red Hat Security Advisory RHSA-2022:6703 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6703
• Red Hat Security Advisory RHSA-2022:6711 vom 2022-09-26
  https://access.redhat.com/errata/RHSA-2022:6711
• SUSE Security Update SUSE-SU-2022:3396-1 vom 2022-09-26
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012383.html
• Debian Security Advisory DLA-3121 vom 2022-09-26
  https://lists.debian.org/debian-lts-announce/2022/09/msg00031.html
• SUSE Security Update SUSE-SU-2022:3441-1 vom 2022-09-28
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012407.html
• SUSE Security Update SUSE-SU-2022:3440-1 vom 2022-09-27
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012406.html
• Oracle Linux Security Advisory ELSA-2022-6702 vom 2022-09-28
  https://linux.oracle.com/errata/ELSA-2022-6702.html
• Gentoo Linux Security Advisory GLSA-202209-27 vom 2022-09-29
  https://security.gentoo.org/glsa/202209-27
• Ubuntu Security Notice USN-5649-1 vom 2022-10-01
  https://ubuntu.com/security/notices/USN-5649-1
• Oracle Linux Bulletin-October 2022 vom 2022-10-18
  https://www.oracle.com/security-alerts/linuxbulletinoct2022.html
• Oracle Linux Security Advisory ELSA-2022-6711 vom 2022-10-27
  https://linux.oracle.com/errata/ELSA-2022-6711.html
• Xerox Security Bulletin XRX22-024
  https://security.business.xerox.com/wp-content/uploads/2022/11/Xerox-Security-Bulletin-XRX22-024-Xerox-FreeFlow-Print-Server-v2-Windows-10.pdf
• NIST Vulnerability Database vom 2023-01-01
  https://nvd.nist.gov/vuln/detail/CVE-2022-3266