Mozilla Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 8

• High 8.8
  CVE-2023-32207

  A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permis…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32205

  In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to pot…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32206

  An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Fir…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32211

  A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox < 113, Firefox ES…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32212

  An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox <…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32213

  When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 11…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2023-32214

  Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This atta…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Alpine
  Jun 19, 2023
• Unscored —
  CVE-2023-32215

  Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCr…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023

Revision history

1. 2023-12-20 #9

   Neue Updates von Gentoo aufgenommen

2. 2023-06-05 #8

   Neue Updates von Amazon aufgenommen

3. 2023-05-24 #7

   Neue Updates von Oracle Linux aufgenommen

4. 2023-05-18 #6

   Neue Updates von Red Hat und Oracle Linux aufgenommen

5. 2023-05-16 #5

   Neue Updates von Red Hat und SUSE aufgenommen

6. 2023-05-15 #4

   Neue Updates von Ubuntu aufgenommen

7. 2023-05-14 #3

   Neue Updates von Debian aufgenommen

8. 2023-05-11 #2

   Neue Updates von SUSE und Fedora aufgenommen

9. 2023-05-10 #1

   Initiale Fassung

References

• Mozilla Foundation Security Advisory vom 2023-05-10
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-18/
• SUSE Security Update SUSE-SU-2023:2175-1 vom 2023-05-11
  https://lists.suse.com/pipermail/sle-security-updates/2023-May/014859.html
• SUSE Security Update SUSE-SU-2023:2176-1 vom 2023-05-11
  https://lists.suse.com/pipermail/sle-security-updates/2023-May/014858.html
• Fedora Security Advisory FEDORA-2023-816C142F3B vom 2023-05-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-816c142f3b
• Fedora Security Advisory FEDORA-2023-A39F529811 vom 2023-05-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-a39f529811
• SUSE Security Update SUSE-SU-2023:2173-1 vom 2023-05-11
  https://lists.suse.com/pipermail/sle-security-updates/2023-May/014861.html
• Debian Security Advisory DSA-5403 vom 2023-05-14
  https://lists.debian.org/debian-security-announce/2023/msg00094.html
• Debian Security Advisory DLA-3421 vom 2023-05-15
  https://lists.debian.org/debian-lts-announce/2023/05/msg00013.html
• Ubuntu Security Notice USN-6075-1 vom 2023-05-15
  https://ubuntu.com/security/notices/USN-6075-1
• Red Hat Security Advisory RHSA-2023:3150 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3150
• Red Hat Security Advisory RHSA-2023:3149 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3149
• Red Hat Security Advisory RHSA-2023:3151 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3151
• Red Hat Security Advisory RHSA-2023:3152 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3152
• Red Hat Security Advisory RHSA-2023:3153 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3153
• Red Hat Security Advisory RHSA-2023:3154 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3154
• Red Hat Security Advisory RHSA-2023:3155 vom 2023-05-17
  https://access.redhat.com/errata/RHSA-2023:3155
• SUSE Security Update SUSE-SU-2023:2211-1 vom 2023-05-16
  https://lists.suse.com/pipermail/sle-security-updates/2023-May/014905.html
• Red Hat Security Advisory RHSA-2023:3221 vom 2023-05-18
  https://access.redhat.com/errata/RHSA-2023:3221
• Oracle Linux Security Advisory ELSA-2023-3150 vom 2023-05-18
  https://oss.oracle.com/pipermail/el-errata/2023-May/013987.html
• Oracle Linux Security Advisory ELSA-2023-3151 vom 2023-05-18
  https://oss.oracle.com/pipermail/el-errata/2023-May/013974.html
• Oracle Linux Security Advisory ELSA-2023-3221 vom 2023-05-24
  https://linux.oracle.com/errata/ELSA-2023-3221.html
• Amazon Linux Security Advisory ALAS2-2023-2051 vom 2023-06-05
  https://alas.aws.amazon.com/AL2/ALAS-2023-2051.html
• Gentoo Linux Security Advisory GLSA-202312-03 vom 2023-12-20
  https://security.gentoo.org/glsa/202312-03