Mozilla Firefox: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 15

• High 8.8
  CVE-2024-0745

  The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have led to a potentially e…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jan 23, 2024
• High 8.8
  CVE-2024-0750

  A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into grantin…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jan 23, 2024
• High 8.8
  CVE-2024-0751

  A malicious devtools extension could have been used to escalate privileges. This vulnerability affects Firefox < 122, F…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jan 23, 2024
• High 8.8
  CVE-2024-0755

  Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jan 23, 2024
• High 7.5
  CVE-2024-0743

  An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability a…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jan 23, 2024
• High 7.5
  CVE-2024-0744

  In some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could have led to an exploi…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jan 23, 2024
• Medium 6.5
  CVE-2024-0741 Public exploit

  An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable c…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jan 23, 2024
• Medium 6.5
  CVE-2024-0746

  A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefo…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jan 23, 2024
• Medium 6.5
  CVE-2024-0747

  When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have over…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jan 23, 2024
• Medium 6.5
  CVE-2024-0752

  A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This …

  Mozilla Firefox Browsers
  Jan 23, 2024
• Medium 6.5
  CVE-2024-0753

  In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jan 23, 2024
• Medium 6.5
  CVE-2024-0754

  Some WASM source files could have caused a crash when loaded in devtools. This vulnerability affects Firefox < 122.

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jan 23, 2024
• Medium 4.3
  CVE-2024-0742

  It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jan 23, 2024
• Medium 4.3
  CVE-2024-0748

  A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitr…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  Jan 23, 2024
• Medium 4.3
  CVE-2024-0749

  A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the addre…

  Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  Jan 23, 2024

Revision history

1. 2024-12-15 #18

   Neue Updates von openSUSE aufgenommen

2. 2024-11-10 #17

   Neue Updates von Debian aufgenommen

3. 2024-10-28 #16

   Neue Updates von Debian aufgenommen

4. 2024-03-26 #15

   Neue Updates von Oracle Linux aufgenommen

5. 2024-03-25 #14

   Neue Updates von Debian aufgenommen

6. 2024-03-10 #13

   Neue Updates von Debian aufgenommen

7. 2024-03-03 #12

   Neue Updates von Ubuntu aufgenommen

8. 2024-02-18 #11

   Neue Updates von Gentoo aufgenommen

9. 2024-02-12 #10

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

10. 2024-02-06 #9

    Neue Updates von Ubuntu aufgenommen

11. 2024-02-05 #8

    Neue Updates von CentOS und Amazon aufgenommen

12. 2024-01-31 #7

    Neue Updates von Oracle Linux und Debian aufgenommen

13. 2024-01-30 #6

    Neue Updates von Red Hat und Oracle Linux aufgenommen

14. 2024-01-29 #5

    Neue Updates von Ubuntu aufgenommen

15. 2024-01-28 #4

    Neue Updates von SUSE aufgenommen

16. 2024-01-25 #3

    Neue Updates von SUSE aufgenommen

17. 2024-01-24 #2

    Neue Updates von Debian, SUSE und Fedora aufgenommen

18. 2024-01-23 #1

    Initiale Fassung

References

• Mozilla Foundation Security Advisory vom 2024-01-23
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/
• Mozilla Foundation Security Advisory vom 2024-01-23
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-02/
• Mozilla Foundation Security Advisory vom 2024-01-23
  https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/
• Debian Security Advisory DSA-5606 vom 2024-01-24
  https://lists.debian.org/debian-security-announce/2024/msg00013.html
• Debian Security Advisory DSA-5605 vom 2024-01-24
  https://lists.debian.org/debian-security-announce/2024/msg00012.html
• SUSE Security Update SUSE-SU-2024:0211-1 vom 2024-01-24
  https://lists.suse.com/pipermail/sle-security-updates/2024-January/017748.html
• Fedora Security Advisory FEDORA-2024-C8C2A52FB8 vom 2024-01-24
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-c8c2a52fb8
• Fedora Security Advisory FEDORA-2024-278A776610 vom 2024-01-24
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-278a776610
• Debian Security Advisory DLA-3720 vom 2024-01-25
  https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html
• SUSE Security Update SUSE-SU-2024:0229-1 vom 2024-01-25
  https://lists.suse.com/pipermail/sle-security-updates/2024-January/017757.html
• SUSE Security Update SUSE-SU-2024:0228-1 vom 2024-01-25
  https://lists.suse.com/pipermail/sle-security-updates/2024-January/017758.html
• SUSE Security Update SUSE-SU-2024:0242-1 vom 2024-01-26
  https://lists.suse.com/pipermail/sle-security-updates/2024-January/017761.html
• Ubuntu Security Notice USN-6610-1 vom 2024-01-29
  https://ubuntu.com/security/notices/USN-6610-1
• Red Hat Security Advisory RHSA-2024:0559 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0559
• Red Hat Security Advisory RHSA-2024:0605 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0605
• Red Hat Security Advisory RHSA-2024:0601 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0601
• Red Hat Security Advisory RHSA-2024:0608 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0608
• Oracle Linux Security Advisory ELSA-2024-0603 vom 2024-01-31
  https://linux.oracle.com/errata/ELSA-2024-0603.html
• Red Hat Security Advisory RHSA-2024:0616 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0616
• Red Hat Security Advisory RHSA-2024:0619 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0619
• Oracle Linux Security Advisory ELSA-2024-0601 vom 2024-01-31
  https://linux.oracle.com/errata/ELSA-2024-0601.html
• Red Hat Security Advisory RHSA-2024:0602 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0602
• Red Hat Security Advisory RHSA-2024:0609 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0609
• Red Hat Security Advisory RHSA-2024:0603 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0603
• Red Hat Security Advisory RHSA-2024:0596 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0596
• Red Hat Security Advisory RHSA-2024:0622 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0622
• Red Hat Security Advisory RHSA-2024:0618 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0618
• Red Hat Security Advisory RHSA-2024:0598 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0598
• Red Hat Security Advisory RHSA-2024:0615 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0615
• Red Hat Security Advisory RHSA-2024:0600 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0600
• Red Hat Security Advisory RHSA-2024:0604 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0604
• Red Hat Security Advisory RHSA-2024:0623 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0623
• Red Hat Security Advisory RHSA-2024:0565 vom 2024-01-30
  https://access.redhat.com/errata/RHSA-2024:0565
• Oracle Linux Security Advisory ELSA-2024-0602 vom 2024-01-31
  https://linux.oracle.com/errata/ELSA-2024-0602.html
• Oracle Linux Security Advisory ELSA-2024-0609 vom 2024-01-31
  https://linux.oracle.com/errata/ELSA-2024-0609.html
• Oracle Linux Security Advisory ELSA-2024-0600 vom 2024-01-31
  https://linux.oracle.com/errata/ELSA-2024-0600.html
• Debian Security Advisory DLA-3727 vom 2024-01-31
  https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html
• Oracle Linux Security Advisory ELSA-2024-0608 vom 2024-01-31
  https://linux.oracle.com/errata/ELSA-2024-0608.html
• CentOS Security Advisory CESA-2024:0600 vom 2024-02-05
  https://lists.centos.org/pipermail/centos-announce/2024-February/099220.html
• Amazon Linux Security Advisory ALAS-2024-2440 vom 2024-02-06
  https://alas.aws.amazon.com/AL2/ALAS-2024-2440.html
• CentOS Security Advisory CESA-2024:0600 vom 2024-02-05
  https://lists.centos.org/pipermail/centos-announce/2024-February/099221.html
• Amazon Linux Security Advisory ALASFIREFOX-2024-021 vom 2024-02-06
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2024-021.html
• Ubuntu Security Notice USN-6610-2 vom 2024-02-07
  https://ubuntu.com/security/notices/USN-6610-2
• Rocky Linux Security Advisory RLSA-2024:0609 vom 2024-02-12
  https://errata.build.resf.org/RLSA-2024:0609
• Rocky Linux Security Advisory RLSA-2024:0608 vom 2024-02-12
  https://errata.build.resf.org/RLSA-2024:0608
• Gentoo Linux Security Advisory GLSA-202402-25 vom 2024-02-19
  https://security.gentoo.org/glsa/202402-25
• Gentoo Linux Security Advisory GLSA-202402-26 vom 2024-02-19
  https://security.gentoo.org/glsa/202402-26
• Ubuntu Security Notice USN-6669-1 vom 2024-03-04
  https://ubuntu.com/security/notices/USN-6669-1
• Debian Security Advisory DLA-3757 vom 2024-03-11
  https://lists.debian.org/debian-lts-announce/2024/03/msg00010.html
• Debian Security Advisory DLA-3775 vom 2024-03-25
  https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html
• Oracle Linux Security Advisory ELSA-2024-1484 vom 2024-03-27
  https://linux.oracle.com/errata/ELSA-2024-1484.html
• SUSE Security Update SUSE-SU-2024:1002-1 vom 2024-03-27
  https://lists.suse.com/pipermail/sle-security-updates/2024-March/018221.html
• Debian Security Advisory DLA-3937 vom 2024-10-28
  https://lists.debian.org/debian-lts-announce/2024/10/msg00028.html
• Debian Security Advisory DSA-5807 vom 2024-11-10
  https://security-tracker.debian.org/tracker/DSA-5807-1
• openSUSE Security Update OPENSUSE-SU-2024:14572-1 vom 2024-12-13
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V/