Mozilla Firefox und Thunderbird: Mehrere Schwachstellen ermöglichen Codeausführung

Summary

Product

Vulnerabilities 7

• High 8.8
  CVE-2022-42928

  Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could hav…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-42932

  Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Fire…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.1
  CVE-2022-42927

  A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redire…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 7.1
  CVE-2022-42930

  If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyU…

  Mozilla Firefox thunderbird firefox Browsers Ubuntu
  Dec 22, 2022
• Medium 6.5
  CVE-2022-42929

  If a website called `window.print()` in a particular way, it could cause a denial of service of the browser, which may …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Low 3.3
  CVE-2022-42931

  Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk…

  Mozilla Firefox thunderbird firefox Browsers Ubuntu
  Dec 22, 2022
• Unscored —
  CVE-2022-46884

  A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune ti…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Aug 24, 2023

Revision history

1. 2023-11-16 #17

   Neue Updates von Amazon aufgenommen

2. 2023-08-24 #16

   CVE-2022-46884 ergänzt

3. 2023-03-22 #15

   Neue Updates von IGEL aufgenommen

4. 2022-12-06 #14

   Neue Updates von Amazon aufgenommen

5. 2022-11-20 #13

   Neue Updates von SUSE und XEROX aufgenommen

6. 2022-11-13 #12

   Neue Updates von Ubuntu aufgenommen

7. 2022-11-10 #11

   Neue Updates von Ubuntu aufgenommen

8. 2022-11-01 #10

   Neue Updates von Ubuntu aufgenommen

9. 2022-10-31 #9

   Neue Updates von Gentoo aufgenommen

10. 2022-10-30 #8

    Neue Updates von Debian aufgenommen

11. 2022-10-27 #7

    Neue Updates von Debian aufgenommen

12. 2022-10-26 #6

    Neue Updates von Oracle Linux aufgenommen

13. 2022-10-25 #5

    Neue Updates von SUSE, Oracle Linux und Red Hat aufgenommen

14. 2022-10-24 #4

    Neue Updates von Mozilla und SUSE aufgenommen

15. 2022-10-20 #3

    Neue Updates von Red Hat und Oracle Linux aufgenommen

16. 2022-10-19 #2

    Neue Updates von Debian aufgenommen

17. 2022-10-18 #1

    Initiale Fassung

References

• Amazon Linux Security Advisory ALASFIREFOX-2023-017 vom 2023-11-17
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-017.html
• IGEL Security Notice ISN-2023-02 vom 2023-03-22
  https://kb.igel.com/securitysafety/en/isn-2023-02-firefox-esr-vulnerabilities-81501314.html
• Mozilla Security Advisory MFSA2022-44 vom 2022-10-18
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-44/
• Mozilla Security Advisory MFSA2022-45 vom 2022-10-18
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-45/
• Debian Security Advisory DSA-5259 vom 2022-10-20
  https://www.debian.org/security/2022/dsa-5259
• Debian Security Advisory DLA-3156 vom 2022-10-20
  https://lists.debian.org/debian-lts-announce/2022/10/msg00025.html
• Red Hat Security Advisory RHSA-2022:7066 vom 2022-10-20
  https://access.redhat.com/errata/RHSA-2022:7066
• Red Hat Security Advisory RHSA-2022:7070 vom 2022-10-20
  https://access.redhat.com/errata/RHSA-2022:7070
• Red Hat Security Advisory RHSA-2022:7072 vom 2022-10-20
  https://access.redhat.com/errata/RHSA-2022:7072
• Red Hat Security Advisory RHSA-2022:7071 vom 2022-10-20
  https://access.redhat.com/errata/RHSA-2022:7071
• Red Hat Security Advisory RHSA-2022:7069 vom 2022-10-20
  https://access.redhat.com/errata/RHSA-2022:7069
• Red Hat Security Advisory RHSA-2022:7068 vom 2022-10-20
  https://access.redhat.com/errata/RHSA-2022:7068
• Oracle Linux Security Advisory ELSA-2022-7071 vom 2022-10-21
  https://linux.oracle.com/errata/ELSA-2022-7071.html
• Mozilla Security Advisory MFSA2022-46 vom 2022-10-25
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-46/
• SUSE Security Update SUSE-SU-2022:3698-1 vom 2022-10-24
  https://lists.suse.com/pipermail/sle-security-updates/2022-October/012635.html
• SUSE Security Update SUSE-SU-2022:3726-1 vom 2022-10-25
  https://lists.suse.com/pipermail/sle-security-updates/2022-October/012666.html
• Oracle Linux Security Advisory ELSA-2022-7070 vom 2022-10-26
  https://linux.oracle.com/errata/ELSA-2022-7070.html
• Red Hat Security Advisory RHSA-2022:7178 vom 2022-10-25
  https://access.redhat.com/errata/RHSA-2022:7178
• Red Hat Security Advisory RHSA-2022:7181 vom 2022-10-25
  https://access.redhat.com/errata/RHSA-2022:7181
• Red Hat Security Advisory RHSA-2022:7184 vom 2022-10-25
  https://access.redhat.com/errata/RHSA-2022:7184
• Red Hat Security Advisory RHSA-2022:7182 vom 2022-10-25
  https://access.redhat.com/errata/RHSA-2022:7182
• Red Hat Security Advisory RHSA-2022:7183 vom 2022-10-25
  https://access.redhat.com/errata/RHSA-2022:7183
• SUSE Security Update SUSE-SU-2022:3719-1 vom 2022-10-25
  https://lists.suse.com/pipermail/sle-security-updates/2022-October/012664.html
• Red Hat Security Advisory RHSA-2022:7190 vom 2022-10-25
  https://access.redhat.com/errata/RHSA-2022:7190
• Oracle Linux Security Advisory ELSA-2022-7184 vom 2022-10-27
  https://linux.oracle.com/errata/ELSA-2022-7184.html
• Oracle Linux Security Advisory ELSA-2022-7178 vom 2022-10-27
  https://linux.oracle.com/errata/ELSA-2022-7178.html
• Oracle Linux Security Advisory ELSA-2022-7190 vom 2022-10-27
  https://linux.oracle.com/errata/ELSA-2022-7190.html
• Oracle Linux Security Advisory ELSA-2022-7069 vom 2022-10-27
  https://linux.oracle.com/errata/ELSA-2022-7069.html
• Debian Security Advisory DSA-5262 vom 2022-10-27
  https://lists.debian.org/debian-security-announce/2022/msg00232.html
• Debian Security Advisory DLA-3170 vom 2022-10-30
  https://lists.debian.org/debian-lts-announce/2022/10/msg00039.html
• Gentoo Linux Security Advisory GLSA-202210-35 vom 2022-10-31
  https://security.gentoo.org/glsa/202210-35
• Gentoo Linux Security Advisory GLSA-202210-34 vom 2022-10-31
  https://security.gentoo.org/glsa/202210-34
• Ubuntu Security Notice USN-5709-1 vom 2022-11-01
  https://ubuntu.com/security/notices/USN-5709-1
• Ubuntu Security Notice USN-5709-2 vom 2022-11-10
  https://ubuntu.com/security/notices/USN-5709-2
• Ubuntu Security Notice USN-5724-1 vom 2022-11-11
  https://ubuntu.com/security/notices/USN-5724-1
• SUSE Security Update SUSE-SU-2022:4085-1 vom 2022-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2022-November/012993.html
• Xerox Security Bulletin XRX22-024
  https://security.business.xerox.com/wp-content/uploads/2022/11/Xerox-Security-Bulletin-XRX22-024-Xerox-FreeFlow-Print-Server-v2-Windows-10.pdf
• Amazon Linux Security Advisory ALAS-2022-1900 vom 2022-12-07
  https://alas.aws.amazon.com/AL2/ALAS-2022-1900.html