Mozilla Firefox und Thunderbird: Schwachstelle ermöglicht Codeausführung

Summary

Product

Vulnerabilities 2

• High 8.8
  CVE-2023-4863 Exploited Public exploit EPSS 100%

  libwebp: OOB write in BuildHuffmanTable

  Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

  Google Chrome libwebp chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi npm PyPI Go crates.io NuGet
  Sep 12, 2023

  KEV Sep 13, 2023
• Unscored —
  CVE-2023-5129 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863.

  tiledb Alpine
  Sep 25, 2023

Revision history

1. 2024-02-20 #18

   Neue Updates von HP aufgenommen

2. 2024-01-07 #17

   Neue Updates von Gentoo aufgenommen

3. 2023-10-19 #16

   Neue Updates von Amazon aufgenommen

4. 2023-10-17 #15

   Neue Updates von Amazon aufgenommen

5. 2023-10-08 #14

   Neue Updates von Fedora aufgenommen

6. 2023-10-04 #13

   Neue Updates von Fedora aufgenommen

7. 2023-10-01 #12

   Neue Updates von NetApp aufgenommen

8. 2023-09-28 #11

   Neue Updates von Fedora aufgenommen

9. 2023-09-27 #10

   Neue Updates von Ubuntu und SUSE aufgenommen

10. 2023-09-26 #9

    Neue Updates von SUSE aufgenommen

11. 2023-09-24 #8

    Neue Updates von Fedora aufgenommen

12. 2023-09-21 #7

    Neue Updates von Fedora aufgenommen

13. 2023-09-20 #6

    Neue Updates von Red Hat und Oracle Linux aufgenommen

14. 2023-09-19 #5

    Neue Updates von Red Hat aufgenommen

15. 2023-09-18 #4

    Neue Updates von Red Hat, Oracle Linux, Fedora, SUSE und Debian aufgenommen

16. 2023-09-14 #3

    Neue Updates von SUSE aufgenommen

17. 2023-09-13 #2

    Neue Updates von Debian und Ubuntu aufgenommen

18. 2023-09-12 #1

    Initiale Fassung

References

• Mozilla Security Advisory MFSA2023-40 vom 2023-09-12
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/
• Fedora Security Advisory FEDORA-2023-D5FAEDE1D6 vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-d5faede1d6
• Fedora Security Advisory FEDORA-2023-F8319BD876 vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-f8319bd876
• Fedora Security Advisory FEDORA-2023-C4FA8A204D vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-c4fa8a204d
• Fedora Security Advisory FEDORA-2023-3388038193 vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-3388038193
• Debian Security Advisory DSA-5497 vom 2023-09-13
  https://lists.debian.org/debian-security-announce/2023/msg00189.html
• Debian Security Advisory DSA-5496 vom 2023-09-13
  https://lists.debian.org/debian-security-announce/2023/msg00188.html
• Ubuntu Security Notice USN-6367-1 vom 2023-09-14
  https://ubuntu.com/security/notices/USN-6367-1
• SUSE Security Update SUSE-SU-2023:3610-1 vom 2023-09-15
  https://lists.suse.com/pipermail/sle-security-updates/2023-September/016157.html
• SUSE Security Update SUSE-SU-2023:3609-1 vom 2023-09-15
  https://lists.suse.com/pipermail/sle-security-updates/2023-September/016158.html
• Red Hat Security Advisory RHSA-2023:5205 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5205
• Red Hat Security Advisory RHSA-2023:5188 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5188
• Red Hat Security Advisory RHSA-2023:5189 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5189
• Red Hat Security Advisory RHSA-2023:5192 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5192
• Oracle Linux Security Advisory ELSA-2023-5200 vom 2023-09-19
  https://linux.oracle.com/errata/ELSA-2023-5200.html
• Red Hat Security Advisory RHSA-2023:5191 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5191
• Red Hat Security Advisory RHSA-2023:5197 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5197
• Red Hat Security Advisory RHSA-2023:5198 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5198
• Red Hat Security Advisory RHSA-2023:5201 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5201
• Red Hat Security Advisory RHSA-2023:5200 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5200
• Red Hat Security Advisory RHSA-2023:5202 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5202
• Red Hat Security Advisory RHSA-2023:5204 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5204
• Oracle Linux Security Advisory ELSA-2023-5197 vom 2023-09-19
  https://linux.oracle.com/errata/ELSA-2023-5197.html
• Oracle Linux Security Advisory ELSA-2023-5191 vom 2023-09-19
  https://linux.oracle.com/errata/ELSA-2023-5191.html
• Fedora Security Advisory FEDORA-EPEL-2023-0DF1F37A48 vom 2023-09-18
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-0df1f37a48
• Red Hat Security Advisory RHSA-2023:5187 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5187
• Red Hat Security Advisory RHSA-2023:5184 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5184
• Red Hat Security Advisory RHSA-2023:5183 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5183
• Oracle Linux Security Advisory ELSA-2023-5184 vom 2023-09-19
  https://linux.oracle.com/errata/ELSA-2023-5184.html
• SUSE Security Update SUSE-SU-2023:3664-1 vom 2023-09-18
  https://lists.suse.com/pipermail/sle-security-updates/2023-September/016188.html
• Red Hat Security Advisory RHSA-2023:5186 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5186
• Red Hat Security Advisory RHSA-2023:5190 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5190
• Debian Security Advisory DLA-3570 vom 2023-09-18
  https://lists.debian.org/debian-lts-announce/2023/09/msg00017.html
• SUSE Security Update SUSE-SU-2023:3634-1 vom 2023-09-18
  https://lists.suse.com/pipermail/sle-security-updates/2023-September/016176.html
• Red Hat Security Advisory RHSA-2023:5224 vom 2023-09-19
  https://access.redhat.com/errata/RHSA-2023:5224
• Red Hat Security Advisory RHSA-2023:5223 vom 2023-09-19
  https://access.redhat.com/errata/RHSA-2023:5223
• Red Hat Security Advisory RHSA-2023:5222 vom 2023-09-19
  https://access.redhat.com/errata/RHSA-2023:5222
• Red Hat Security Advisory RHSA-2023:5214 vom 2023-09-19
  https://access.redhat.com/errata/RHSA-2023:5214
• Red Hat Security Advisory RHSA-2023:5236 vom 2023-09-19
  https://access.redhat.com/errata/RHSA-2023:5236
• Red Hat Security Advisory RHSA-2023:5309 vom 2023-09-20
  https://access.redhat.com/errata/RHSA-2023:5309
• Oracle Linux Security Advisory ELSA-2023-5224 vom 2023-09-20
  http://linux.oracle.com/errata/ELSA-2023-5224.html
• Oracle Linux Security Advisory ELSA-2023-5309 vom 2023-09-20
  https://linux.oracle.com/errata/ELSA-2023-5309.html
• Oracle Linux Security Advisory ELSA-2023-5214 vom 2023-09-20
  http://linux.oracle.com/errata/ELSA-2023-5214.html
• Oracle Linux Security Advisory ELSA-2023-5201 vom 2023-09-20
  http://linux.oracle.com/errata/ELSA-2023-5201.html
• Fedora Security Advisory FEDORA-2023-1BCD79CDF6 vom 2023-09-21
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-1bcd79cdf6
• Fedora Security Advisory FEDORA-EPEL-2023-4211889C5A vom 2023-09-22
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4211889c5a
• Fedora Security Advisory FEDORA-EPEL-2023-981E9F53FF vom 2023-09-24
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-981e9f53ff
• SUSE Security Update SUSE-SU-2023:3794-1 vom 2023-09-26
  https://lists.suse.com/pipermail/sle-security-updates/2023-September/016334.html
• Important release of LibreOffice
  https://blog.documentfoundation.org/blog/2023/09/26/lo-762-and-lo-757/
• Ubuntu Security Notice USN-6369-2 vom 2023-09-28
  https://ubuntu.com/security/notices/USN-6369-2
• SUSE Security Update SUSE-SU-2023:3829-1 vom 2023-09-27
  https://lists.suse.com/pipermail/sle-security-updates/2023-September/016363.html
• Fedora Security Advisory FEDORA-2023-2A0668FE43 vom 2023-09-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-2a0668fe43
• Fedora Security Advisory FEDORA-2023-E692A72898 vom 2023-09-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-e692a72898
• Fedora Security Advisory FEDORA-2023-9108CDA47C vom 2023-09-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-9108cda47c
• NetApp Security Advisory NTAP-20230929-0011 vom 2023-09-29
  https://security.netapp.com/advisory/ntap-20230929-0011/
• Fedora Security Advisory FEDORA-2023-97EEA79ACB vom 2023-10-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-97eea79acb
• Fedora Security Advisory FEDORA-2023-0F232991DE vom 2023-10-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-0f232991de
• Fedora Security Advisory FEDORA-2023-BBB8D72C6F vom 2023-10-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-bbb8d72c6f
• Fedora Security Advisory FEDORA-2023-09EC498A2A vom 2023-10-08
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-09ec498a2a
• Amazon Linux Security Advisory ALASFIREFOX-2023-015 vom 2023-10-18
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-015.html
• Amazon Linux Security Advisory ALAS2-2023-2291 vom 2023-10-20
  https://alas.aws.amazon.com/AL2/ALAS-2023-2291.html
• Gentoo Linux Security Advisory GLSA-202401-10 vom 2024-01-07
  https://security.gentoo.org/glsa/202401-10
• HP Security Bulletin HPSBPI03916 vom 2024-02-13
  https://support.hp.com/us-en/document/ish_10173649-10204798-16/HPSBPI03916