Mozilla Firefox und Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 11

• Critical 9.8
  CVE-2022-46882

  A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Fire…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-46871

  An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited. This vulnerability a…

  Mozilla Firefox thunderbird mozjs38 Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-46873

  Because Firefox did not implement the <code>unsafe-hashes</code> CSP directive, an attacker who was able to inject mark…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Dec 22, 2022
• High 8.8
  CVE-2022-46874

  A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious ex…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-46878

  Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team reported memory safety bugs …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-46879

  Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team r…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Dec 22, 2022
• High 8.8
  CVE-2022-46881

  An optimization in WebGL was incorrect in some cases, and could have led to memory corruption and a potentially exploit…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.6
  CVE-2022-46872

  An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clip…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-46875

  The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a us…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-46880

  A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.<br />*Note*:…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 4.3
  CVE-2022-46877

  By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential use…

  Mozilla Firefox thunderbird mozjs38 Browsers Debian Ubuntu Alpine
  Dec 22, 2022

Revision history

1. 2023-09-27 #26

   Neue Updates von Amazon aufgenommen

2. 2023-05-03 #25

   Neue Updates von Gentoo aufgenommen

3. 2023-03-22 #24

   Neue Updates von XEROX und IGEL aufgenommen

4. 2023-02-22 #23

   Neue Updates von Amazon aufgenommen

5. 2023-02-19 #22

   Neue Updates von Debian aufgenommen

6. 2023-02-05 #21

   Neue Updates von Ubuntu aufgenommen

7. 2023-02-01 #20

   Referenz(en) aufgenommen: FEDORA-2023-99BA1917DA, FEDORA-2023-97A977A96A

8. 2023-01-30 #19

   Neue Updates von CentOS aufgenommen

9. 2023-01-29 #18

   Neue Updates von Oracle Linux aufgenommen

10. 2023-01-26 #17

    Neue Updates von Red Hat aufgenommen

11. 2023-01-25 #16

    Neue Updates von Red Hat und Oracle Linux aufgenommen

12. 2023-01-24 #15

    Neue Updates von Oracle Linux aufgenommen

13. 2023-01-23 #14

    Neue Updates von Red Hat aufgenommen

14. 2023-01-22 #13

    Neue Updates von SUSE und Mozilla aufgenommen

15. 2023-01-19 #12

    Neue Updates von Debian aufgenommen

16. 2023-01-18 #11

    Neue Updates von Debian aufgenommen

17. 2023-01-17 #10

    Neue Updates von Mozilla aufgenommen

18. 2023-01-09 #9

    Neue Updates von Ubuntu aufgenommen

19. 2023-01-05 #8

    Neue Updates von Ubuntu aufgenommen

20. 2022-12-29 #7

    Neue Updates von SUSE aufgenommen

21. 2022-12-21 #6

    Neue Updates von Mozilla aufgenommen

22. 2022-12-20 #5

    Neue Updates von SUSE aufgenommen

23. 2022-12-18 #4

    Neue Updates von Debian und Oracle Linux aufgenommen

24. 2022-12-15 #3

    Neue Updates von Oracle Linux, Red Hat und Debian aufgenommen

25. 2022-12-14 #2

    Neue Updates von Debian und Fedora aufgenommen

References

• Amazon Linux Security Advisory ALASFIREFOX-2023-008 vom 2023-09-27
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-008.html
• Amazon Linux Security Advisory ALASFIREFOX-2023-013 vom 2023-09-27
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-013.html
• Gentoo Linux Security Advisory GLSA-202305-13 vom 2023-05-03
  https://security.gentoo.org/glsa/202305-13
• IGEL Security Notice ISN-2023-02 vom 2023-03-22
  https://kb.igel.com/securitysafety/en/isn-2023-02-firefox-esr-vulnerabilities-81501314.html
• XEROX Security Advisory XRX23-002 vom 2023-03-23
  https://security.business.xerox.com/wp-content/uploads/2023/03/Xerox-Security-Bulletin-XRX23-002-FreeFlow-Print-Server-v2_Windows10.pdf
• Mozilla Foundation Security Advisory vom 2022-12-13
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-51/
• Mozilla Foundation Security Advisory vom 2022-12-13
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-52/
• Mozilla Foundation Security Advisory vom 2022-12-13
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-53/
• SUSE Security Update SUSE-SU-2022:4461-1 vom 2022-12-13
  https://lists.suse.com/pipermail/sle-security-updates/2022-December/013227.html
• SUSE Security Update SUSE-SU-2022:4460-1 vom 2022-12-13
  https://lists.suse.com/pipermail/sle-security-updates/2022-December/013230.html
• SUSE Security Update SUSE-SU-2022:4462-1 vom 2022-12-13
  https://lists.suse.com/pipermail/sle-security-updates/2022-December/013229.html
• Debian Security Advisory DSA-5301 vom 2022-12-14
  https://lists.debian.org/debian-security-announce/2022/msg00272.html
• Ubuntu Security Notice USN-5782-1 vom 2022-12-15
  https://ubuntu.com/security/notices/USN-5782-1
• Oracle Linux Security Advisory ELSA-2022-9079 vom 2022-12-16
  http://linux.oracle.com/errata/ELSA-2022-9079-1.html
• Red Hat Security Advisory RHSA-2022:9066 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9066
• Red Hat Security Advisory RHSA-2022:9067 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9067
• Red Hat Security Advisory RHSA-2022:9068 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9068
• Red Hat Security Advisory RHSA-2022:9065 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9065
• Oracle Linux Security Advisory ELSA-2022-9072 vom 2022-12-16
  http://linux.oracle.com/errata/ELSA-2022-9072-1.html
• Red Hat Security Advisory RHSA-2022:9072 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9072
• Red Hat Security Advisory RHSA-2022:9069 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9069
• Red Hat Security Advisory RHSA-2022:9071 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9071
• Red Hat Security Advisory RHSA-2022:9070 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9070
• Red Hat Security Advisory RHSA-2022:9075 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9075
• Red Hat Security Advisory RHSA-2022:9074 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9074
• Red Hat Security Advisory RHSA-2022:9076 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9076
• Red Hat Security Advisory RHSA-2022:9077 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9077
• Red Hat Security Advisory RHSA-2022:9080 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9080
• Red Hat Security Advisory RHSA-2022:9078 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9078
• Red Hat Security Advisory RHSA-2022:9079 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9079
• Red Hat Security Advisory RHSA-2022:9081 vom 2022-12-15
  https://access.redhat.com/errata/RHSA-2022:9081
• Oracle Linux Security Advisory ELSA-2022-9067 vom 2022-12-16
  https://linux.oracle.com/errata/ELSA-2022-9067-1.html
• Oracle Linux Security Advisory ELSA-2022-9072 vom 2022-12-16
  https://linux.oracle.com/errata/ELSA-2022-9072-1.html
• Debian Security Advisory DLA-3241 vom 2022-12-15
  https://lists.debian.org/debian-lts-announce/2022/12/msg00028.html
• Debian Security Advisory DLA-3242 vom 2022-12-15
  https://lists.debian.org/debian-lts-announce/2022/12/msg00029.html
• Debian Security Advisory DSA-5303 vom 2022-12-16
  https://lists.debian.org/debian-security-announce/2022/msg00274.html
• Oracle Linux Security Advisory ELSA-2022-9065 vom 2022-12-17
  http://linux.oracle.com/errata/ELSA-2022-9065-1.html
• Oracle Linux Security Advisory ELSA-2022-9074 vom 2022-12-17
  http://linux.oracle.com/errata/ELSA-2022-9074-1.html
• Oracle Linux Security Advisory ELSA-2022-9080 vom 2022-12-17
  http://linux.oracle.com/errata/ELSA-2022-9080-1.html
• SUSE Security Update SUSE-SU-2022:4579-1 vom 2022-12-20
  https://lists.suse.com/pipermail/sle-security-updates/2022-December/013290.html
• Mozilla Security Advisory MFSA2022-54 vom 2022-12-21
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-54/
• SUSE Security Update SUSE-SU-2022:4636-1 vom 2022-12-29
  https://lists.suse.com/pipermail/sle-security-updates/2022-December/013380.html
• Ubuntu Security Notice USN-5782-2 vom 2023-01-05
  https://ubuntu.com/security/notices/USN-5782-2
• Ubuntu Security Notice USN-5782-3 vom 2023-01-10
  https://ubuntu.com/security/notices/USN-5782-3
• Mozilla Security Advisory MFSA2023-02 vom 2023-01-17
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-02/
• Debian Security Advisory DSA-5322 vom 2023-01-18
  https://lists.debian.org/debian-security-announce/2023/msg00011.html
• Debian Security Advisory DLA-3275 vom 2023-01-19
  https://lists.debian.org/debian-lts-announce/2023/01/msg00015.html
• SUSE Security Update SUSE-SU-2023:0113-1 vom 2023-01-20
  https://lists.suse.com/pipermail/sle-security-updates/2023-January/013482.html
• SUSE Security Update SUSE-SU-2023:0112-1 vom 2023-01-20
  https://lists.suse.com/pipermail/sle-security-updates/2023-January/013488.html
• SUSE Security Update SUSE-SU-2023:0111-1 vom 2023-01-20
  https://lists.suse.com/pipermail/sle-security-updates/2023-January/013492.html
• Mozilla Security Advisory MFSA2023-03 vom 2023-01-23
  https://www.cybersecurity-help.cz/vdb/SB2023012305
• Red Hat Security Advisory RHSA-2023:0296 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0296
• Red Hat Security Advisory RHSA-2023:0295 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0295
• Red Hat Security Advisory RHSA-2023:0288 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0288
• Red Hat Security Advisory RHSA-2023:0286 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0286
• Red Hat Security Advisory RHSA-2023:0285 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0285
• Red Hat Security Advisory RHSA-2023:0294 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0294
• Red Hat Security Advisory RHSA-2023:0290 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0290
• Red Hat Security Advisory RHSA-2023:0289 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0289
• Oracle Linux Security Advisory ELSA-2023-0285 vom 2023-01-24
  http://linux.oracle.com/errata/ELSA-2023-0285.html
• Oracle Linux Security Advisory ELSA-2023-0296 vom 2023-01-24
  http://linux.oracle.com/errata/ELSA-2023-0296.html
• Red Hat Security Advisory RHSA-2023:0462 vom 2023-01-25
  https://access.redhat.com/errata/RHSA-2023:0462
• Oracle Linux Security Advisory ELSA-2023-0288 vom 2023-01-24
  http://linux.oracle.com/errata/ELSA-2023-0288.html
• Oracle Linux Security Advisory ELSA-2023-0456 vom 2023-01-26
  https://linux.oracle.com/errata/ELSA-2023-0456.html
• Red Hat Security Advisory RHSA-2023:0463 vom 2023-01-25
  https://access.redhat.com/errata/RHSA-2023:0463
• Red Hat Security Advisory RHSA-2023:0461 vom 2023-01-25
  https://access.redhat.com/errata/RHSA-2023:0461
• Red Hat Security Advisory RHSA-2023:0457 vom 2023-01-25
  https://access.redhat.com/errata/RHSA-2023:0457
• Oracle Linux Security Advisory ELSA-2023-0463 vom 2023-01-26
  https://linux.oracle.com/errata/ELSA-2023-0463.html
• Red Hat Security Advisory RHSA-2023:0456 vom 2023-01-25
  https://access.redhat.com/errata/RHSA-2023:0456
• Red Hat Security Advisory RHSA-2023:0460 vom 2023-01-25
  https://access.redhat.com/errata/RHSA-2023:0460
• Red Hat Security Advisory RHSA-2023:0459 vom 2023-01-25
  https://access.redhat.com/errata/RHSA-2023:0459
• Red Hat Security Advisory RHSA-2023:0476 vom 2023-01-26
  https://access.redhat.com/errata/RHSA-2023:0476
• Oracle Linux Security Advisory ELSA-2023-0476 vom 2023-01-27
  http://linux.oracle.com/errata/ELSA-2023-0476.html
• CentOS Security Advisory CESA-2023:0296 vom 2023-01-30
  https://lists.centos.org/pipermail/centos-announce/2023-January/086353.html
• CentOS Security Advisory CESA-2023:0456 vom 2023-01-30
  https://lists.centos.org/pipermail/centos-announce/2023-January/086354.html
• Ubuntu Security Notice USN-5824-1 vom 2023-02-06
  https://ubuntu.com/security/notices/USN-5824-1
• Debian Security Advisory DSA-5355 vom 2023-02-19
  https://www.debian.org/security/2023/dsa-5355
• Debian Security Advisory DLA-3324 vom 2023-02-20
  https://lists.debian.org/debian-lts-announce/2023/02/msg00018.html
• Amazon Linux Security Advisory ALAS-2023-1951 vom 2023-02-22
  https://alas.aws.amazon.com/AL2/ALAS-2023-1951.html