Mozilla Firefox und Mozilla Firefox ESR: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 12

• High 8.8
  CVE-2023-32207

  A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permis…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32205

  In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to pot…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32206

  An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Fir…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32208

  Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox < 113.

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jun 19, 2023
• Unscored —
  CVE-2023-32209

  A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox < 113.

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jun 19, 2023
• Unscored —
  CVE-2023-32210

  Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately pri…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jun 19, 2023
• Unscored —
  CVE-2023-32211

  A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox < 113, Firefox ES…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32212

  An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox <…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32213

  When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 11…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32214

  Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This atta…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Alpine
  Jun 19, 2023
• Unscored —
  CVE-2023-32215

  Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCr…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32216

  Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla Fuzzing Team rep…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jun 19, 2023

Revision history

1. 2024-01-07 #11

   Neue Updates von Gentoo aufgenommen

2. 2023-09-27 #10

   Neue Updates von Amazon aufgenommen

3. 2023-06-08 #9

   Neue Updates von Oracle Linux aufgenommen

4. 2023-05-24 #8

   Neue Updates von Ubuntu aufgenommen

5. 2023-05-18 #7

   Neue Updates von Oracle Linux und Red Hat aufgenommen

6. 2023-05-16 #6

   Neue Updates von Red Hat aufgenommen

7. 2023-05-15 #5

   Neue Updates von Ubuntu aufgenommen

8. 2023-05-14 #4

   Neue Updates von Ubuntu aufgenommen

9. 2023-05-11 #3

   Neue Updates von SUSE aufgenommen

10. 2023-05-10 #2

    Neue Updates von Debian aufgenommen

11. 2023-05-09 #1

    Initiale Fassung

References

• Mozilla Foundation Security Advisory 2023-16 vom 2023-05-09
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-16/
• Mozilla Foundation Security Advisory 2023-17 vom 2023-05-09
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-17/
• Debian Security Advisory DSA-5400 vom 2023-05-11
  https://www.debian.org/security/2023/dsa-5400
• Debian Security Advisory DLA-3417 vom 2023-05-11
  https://lists.debian.org/debian-lts-announce/2023/05/msg00009.html
• SUSE Security Update SUSE-SU-2023:2176-1 vom 2023-05-11
  https://lists.suse.com/pipermail/sle-security-updates/2023-May/014858.html
• SUSE Security Update SUSE-SU-2023:2175-1 vom 2023-05-11
  https://lists.suse.com/pipermail/sle-security-updates/2023-May/014859.html
• SUSE Security Update SUSE-SU-2023:2173-1 vom 2023-05-11
  https://lists.suse.com/pipermail/sle-security-updates/2023-May/014861.html
• Ubuntu Security Notice USN-6074-1 vom 2023-05-15
  https://ubuntu.com/security/notices/USN-6074-1
• Ubuntu Security Notice USN-6074-2 vom 2023-05-16
  https://ubuntu.com/security/notices/USN-6074-2
• Red Hat Security Advisory RHSA-2023:3137 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3137
• Red Hat Security Advisory RHSA-2023:3138 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3138
• Red Hat Security Advisory RHSA-2023:3139 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3139
• Red Hat Security Advisory RHSA-2023:3140 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3140
• Red Hat Security Advisory RHSA-2023:3141 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3141
• Red Hat Security Advisory RHSA-2023:3142 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3142
• Red Hat Security Advisory RHSA-2023:3143 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3143
• Oracle Linux Security Advisory ELSA-2023-3137 vom 2023-05-18
  https://oss.oracle.com/pipermail/el-errata/2023-May/013975.html
• Red Hat Security Advisory RHSA-2023:3220 vom 2023-05-18
  https://access.redhat.com/errata/RHSA-2023:3220
• Oracle Linux Security Advisory ELSA-2023-3143 vom 2023-05-19
  https://linux.oracle.com/errata/ELSA-2023-3143.html
• Ubuntu Security Notice USN-6074-3 vom 2023-05-24
  https://ubuntu.com/security/notices/USN-6074-3
• Oracle Linux Security Advisory ELSA-2023-3220 vom 2023-06-08
  https://linux.oracle.com/errata/ELSA-2023-3220.html
• Amazon Linux Security Advisory ALASFIREFOX-2023-005 vom 2023-09-27
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-005.html
• Gentoo Linux Security Advisory GLSA-202401-10 vom 2024-01-07
  https://security.gentoo.org/glsa/202401-10