Skip to content
OpenAdvisories
High WID-SEC-2022-1589 4 CVEs

Mozilla Thunderbird: Mehrere Schwachstellen

Published Sep 29, 2022 · Updated Dec 6, 2022 · Revision 7 · de-DE

Vendor: amazon Vendor: gentoo Vendor: Mozilla Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: Thunderbird < 102.3.1 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Thunderbird ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Denial of Service Zustand herbeizuführen.

Product

Thunderbird ist ein Open Source E-Mail Client.

Vulnerabilities 4

  • High 8.6
    CVE-2022-39250

    Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification

    Matrix JavaScript SDK is the Matrix Client-Server software development kit (SDK) for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver could interfere with the verification flow between two users, injecting its own cross…

    Matrix matrix-js-sdk thunderbird node-matrix-js-sdk Debian Ubuntu Alpine npm
  • High 8.6
    CVE-2022-39251

    Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion

    Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver can construct messages that legitimately appear to have come from another person, without any indication such as…

    Matrix matrix-js-sdk thunderbird node-matrix-js-sdk Debian Ubuntu Alpine npm
  • High 7.5
    CVE-2022-39249

    Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions

    Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver can construct messages appearing to have come from another person. Such messages will be marked with a grey shie…

    Matrix matrix-js-sdk thunderbird node-matrix-js-sdk Debian Ubuntu Alpine npm
  • Medium 4.3
    CVE-2022-39236

    Matrix Javascript SDK improper beacon events can cause availability issues

    Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly formed beacon events can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process…

    Matrix matrix-js-sdk thunderbird node-matrix-js-sdk Debian Ubuntu Alpine npm

Revision history

  1. #7

    Neue Updates von Amazon aufgenommen

  2. #6

    Neue Updates von Ubuntu aufgenommen

  3. #5

    Neue Updates von Gentoo aufgenommen

  4. #4

    Neue Updates von SUSE aufgenommen

  5. #3

    Neue Updates von Oracle Linux aufgenommen

  6. #2

    Neue Updates von Red Hat aufgenommen

  7. #1

    Initiale Fassung

References