Skip to content
OpenAdvisories
High · 8.8 CVE-2023-0767 EUVD-2023-12784GHSA-687w-wqw8-qq8j

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attribute…

Published Jun 2, 2023 · Updated May 5, 2025 · Assigned by mozilla

Description

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

Affected products

VendorProductAffectedFixed
Mozilla Firefox unspecified – < 110 110
Mozilla Thunderbird unspecified – < 102.8 102.8
Mozilla Firefox ESR unspecified – < 102.8 102.8

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 firefox-esr 102.8.0esr-1 —
Debian 14 nss 2:3.87.1-1 —
Debian 14 thunderbird 1:102.8.0-1 —
Debian 13 firefox-esr 102.8.0esr-1 —
Debian 13 nss 2:3.87.1-1 —
Debian 13 thunderbird 1:102.8.0-1 —
Debian 12 firefox-esr 102.8.0esr-1 —
Debian 12 nss 2:3.87.1-1 —
Debian 12 thunderbird 1:102.8.0-1 —
Debian 11 firefox-esr 102.8.0esr-1~deb11u1 DSA-5350-1
Debian 11 nss 2:3.61-1+deb11u3 DSA-5353-1
Debian 11 thunderbird 1:102.8.0-1~deb11u1 DSA-5355-1
Debian 10 firefox-esr 102.8.0esr-1~deb10u1 DLA-3319-1
Debian 10 nss 2:3.42.1-1+deb10u6 DLA-3327-1
Debian 10 thunderbird 1:102.8.0-1~deb10u1 DLA-3324-1
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS mozjs78 +1 No fix yet —
Ubuntu 22.04 LTS nss 2:3.68.2-0ubuntu1.2 USN-5892-1
Ubuntu 22.04 LTS thunderbird 1:102.8.0+build2-0ubuntu0.22.04.1 USN-5943-1
Ubuntu 20.04 LTS firefox 110.0+build3-0ubuntu0.20.04.1 USN-5880-1
Ubuntu 20.04 LTS mozjs52 +1 No fix yet —
Ubuntu 20.04 LTS nss 2:3.49.1-1ubuntu1.9 USN-5892-1
Ubuntu 20.04 LTS thunderbird 1:102.8.0+build2-0ubuntu0.20.04.1 USN-5943-1
Ubuntu 18.04 LTS firefox 110.0+build3-0ubuntu0.18.04.1 USN-5880-1
Ubuntu 18.04 LTS mozjs38 +1 No fix yet —
Ubuntu 18.04 LTS nss 2:3.35-2ubuntu2.16 USN-5892-1
Ubuntu 18.04 LTS thunderbird 1:102.8.0+build2-0ubuntu0.18.04.1 USN-5943-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS nss 2:3.28.4-0ubuntu0.16.04.14+esm4 USN-5892-2
Ubuntu Pro 14.04 LTS nss 2:3.28.4-0ubuntu0.14.04.5+esm12 USN-5892-2
ReleasePackageFixed inAdvisory
RHEL 9 nspr +1 4.34.0-17.el9_1 RHSA-2023:1368
RHEL 9 nss +9 3.79.0-17.el9_1 RHSA-2023:1368
RHEL 8 nss +9 3.79.0-11.el8_7 RHSA-2023:1252
RHEL 7 nss +4 3.79.0-5.el7_9 RHSA-2023:1332
Show 9 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhev Hypervisor 4 redhat-virtualization-host +1 4.5.3-202304051438_8.6 RHSA-2023:1677
RHEL 9.0 EUS nspr +1 4.34.0-17.el9_0 RHSA-2023:1365
RHEL 9.0 EUS nss +9 3.79.0-17.el9_0 RHSA-2023:1365
RHEL 8.6 EUS nss +9 3.79.0-11.el8_6 RHSA-2023:1369
RHEL 8.4 EUS firefox 102.9.0-4.el8_4 RHSA-2023:1444
RHEL 8.4 EUS nss +9 3.67.0-8.el8_4 RHSA-2023:1370
RHEL 8.4 EUS thunderbird 102.9.0-2.el8_4 RHSA-2023:1472
RHEL 8.2 TUS firefox 102.9.0-4.el8_2 RHSA-2023:1445
RHEL 8.2 TUS nss +9 3.53.1-13.el8_2 RHSA-2023:1406
RHEL 8.2 TUS thunderbird 102.9.0-2.el8_2 RHSA-2023:1443
RHEL 8.2 E4S firefox 102.9.0-4.el8_2 RHSA-2023:1445
RHEL 8.2 E4S nss +9 3.53.1-13.el8_2 RHSA-2023:1406
RHEL 8.2 E4S thunderbird 102.9.0-2.el8_2 RHSA-2023:1443
RHEL 8.2 AUS firefox 102.9.0-4.el8_2 RHSA-2023:1445
RHEL 8.2 AUS nss +9 3.53.1-13.el8_2 RHSA-2023:1406
RHEL 8.2 AUS thunderbird 102.9.0-2.el8_2 RHSA-2023:1443
RHEL 8.1 E4S firefox 102.9.0-4.el8_1 RHSA-2023:1479
RHEL 8.1 E4S nss +9 3.44.0-11.el8_1 RHSA-2023:1436
RHEL 8.1 E4S thunderbird 102.9.0-2.el8_1 RHSA-2023:1442
RHEL 6 ELS nss +4 3.44.0-13.el6_10 RHSA-2023:1366

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 firefox +2 102.8.0-2.el9_1.alma ALSA-2023:0824, ALSA-2023:0810
AlmaLinux 9 nspr +1 4.34.0-17.el9_1 ALSA-2023:1368
AlmaLinux 9 nss +9 3.79.0-17.el9_1 ALSA-2023:1368
AlmaLinux 8 firefox +1 102.8.0-2.el8_7.alma ALSA-2023:0821, ALSA-2023:0808
AlmaLinux 8 nss +9 3.79.0-11.el8_7 ALSA-2023:1252

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 firefox +1 102.8.0-2.el9_1 RLSA-2023:0824, RLSA-2023:0810
Rocky Linux 9 nss 3.79.0-17.el9_1 RLSA-2023:1368
Rocky Linux 8 firefox +1 102.8.0-2.el8_7 RLSA-2023:0821, RLSA-2023:0808
Rocky Linux 8 nss 3.79.0-11.el8_7 RLSA-2023:1252
ReleasePackageFixed inAdvisory
SLES 15 SP4 MozillaFirefox 102.8.0-150200.152.78.1 SUSE-SU-2023:0461-1
SLES 15 SP4 MozillaThunderbird 102.8.0-150200.8.105.2 SUSE-SU-2023:0599-1
SLES 15 SP4 mozilla-nss 3.79.4-150400.3.26.1 SUSE-SU-2023:0434-1
SLES 15 SP3 MozillaFirefox 102.8.0-150200.152.78.1 SUSE-SU-2023:0461-1
SLES 15 SP3 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SLES 15 SP2 MozillaFirefox 102.8.0-150200.152.78.1 SUSE-SU-2023:0461-1
SLES 15 SP2 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SLES 15 SP1 MozillaFirefox 102.8.0-150000.150.76.1 SUSE-SU-2023:0469-1
SLES 15 SP1 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SLES 12 SP5 MozillaFirefox 102.8.0-112.150.1 SUSE-SU-2023:0466-1
SLES 12 SP5 mozilla-nss 3.79.4-58.94.1 SUSE-SU-2023:0468-1
Show 21 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP4 MozillaFirefox 102.8.0-112.150.1 SUSE-SU-2023:0466-1
SLES 12 SP4 mozilla-nss 3.79.4-58.94.1 SUSE-SU-2023:0468-1
SLES 12 SP2 MozillaFirefox 102.8.0-112.150.1 SUSE-SU-2023:0466-1
SLES 12 SP2 mozilla-nss 3.79.4-58.94.1 SUSE-SU-2023:0468-1
SLES for SAP 15 SP3 MozillaFirefox 102.8.0-150200.152.78.1 SUSE-SU-2023:0461-1
SLES for SAP 15 SP3 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SLES for SAP 15 SP2 MozillaFirefox 102.8.0-150200.152.78.1 SUSE-SU-2023:0461-1
SLES for SAP 15 SP2 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SLES for SAP 15 SP1 MozillaFirefox 102.8.0-150000.150.76.1 SUSE-SU-2023:0469-1
SLES for SAP 15 SP1 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SLES for SAP 12 SP5 MozillaFirefox 102.8.0-112.150.1 SUSE-SU-2023:0466-1
SLES for SAP 12 SP5 mozilla-nss 3.79.4-58.94.1 SUSE-SU-2023:0468-1
SLES for SAP 12 SP4 MozillaFirefox 102.8.0-112.150.1 SUSE-SU-2023:0466-1
SLES for SAP 12 SP4 mozilla-nss 3.79.4-58.94.1 SUSE-SU-2023:0468-1
SLE Real Time 15 SP3 MozillaFirefox 102.8.0-150200.152.78.1 SUSE-SU-2023:0461-1
SLE Real Time 15 SP3 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SLE Micro 5.3 mozilla-nss 3.79.4-150400.3.26.1 SUSE-SU-2023:0434-1
SLE Micro 5.2 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SLE Micro 5.1 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SLE HPC 15 SP3 MozillaFirefox 102.8.0-150200.152.78.1 SUSE-SU-2023:0461-1
SLE HPC 15 SP3 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SLE HPC 15 SP2 MozillaFirefox 102.8.0-150200.152.78.1 SUSE-SU-2023:0461-1
SLE HPC 15 SP2 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SLE HPC 15 SP1 MozillaFirefox 102.8.0-150000.150.76.1 SUSE-SU-2023:0469-1
SLE HPC 15 SP1 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SUSE OpenStack Cloud Crowbar 9 MozillaFirefox 102.8.0-112.150.1 SUSE-SU-2023:0466-1
SUSE OpenStack Cloud Crowbar 9 mozilla-nss 3.79.4-58.94.1 SUSE-SU-2023:0468-1
SUSE OpenStack Cloud 9 MozillaFirefox 102.8.0-112.150.1 SUSE-SU-2023:0466-1
SUSE OpenStack Cloud 9 mozilla-nss 3.79.4-58.94.1 SUSE-SU-2023:0468-1
SUSE Manager Server 4.2 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SUSE Manager Retail Branch Server 4.2 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SUSE Manager Proxy 4.2 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SUSE Enterprise Storage 7.1 MozillaFirefox 102.8.0-150200.152.78.1 SUSE-SU-2023:0461-1
SUSE Enterprise Storage 7.1 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
SUSE Enterprise Storage 7 MozillaFirefox 102.8.0-150200.152.78.1 SUSE-SU-2023:0461-1
SUSE Enterprise Storage 7 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 110.0.1-1.1 openSUSE-SU-2024:12753-1
openSUSE Tumbleweed MozillaThunderbird 102.8.0-1.1 openSUSE-SU-2024:12713-1
openSUSE Tumbleweed firefox-esr 128.5.1-1.1 openSUSE-SU-2024:14572-1
openSUSE Leap 15.4 MozillaFirefox 102.8.0-150200.152.78.1 SUSE-SU-2023:0461-1
openSUSE Leap 15.4 MozillaThunderbird 102.8.0-150200.8.105.2 SUSE-SU-2023:0599-1
openSUSE Leap 15.4 mozilla-nss 3.79.4-150400.3.26.1 SUSE-SU-2023:0434-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.3 mozilla-nss 3.79.4-150400.3.26.1 SUSE-SU-2023:0434-1
openSUSE Leap Micro 5.2 mozilla-nss 3.79.4-150000.3.93.1 SUSE-SU-2023:0443-1
ReleasePackageFixed inAdvisory
Alpine v3.23 firefox-esr 102.8.0-r0 —
Alpine v3.22 firefox-esr 102.8.0-r0 —
Alpine v3.21 firefox-esr 102.8.0-r0 —
Alpine v3.20 firefox-esr 102.8.0-r0 —
Alpine v3.19 firefox-esr 102.8.0-r0 —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.18 firefox-esr 102.8.0-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 nspr +1 4.35.0-4.amzn2023.0.1 ALAS2023-2023-124
Amazon Linux 2023 nss +10 3.88.1-1.amzn2023.0.1 ALAS2023-2023-124
Amazon Linux 2 nss +4 3.79.0-4.amzn2.0.1 ALAS2-2023-1992
Amazon Linux 2 thunderbird 102.8.0-1.amzn2.0.1 ALAS2-2023-1983

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 firefox +2 102.8.0-2.0.1.el9_1 ELSA-2023-0824, ELSA-2023-0810
Oracle Linux 9 nspr +1 4.34.0-17.el9_1 ELSA-2023-1368
Oracle Linux 9 nss +9 3.79.0-17.el9_1 ELSA-2023-1368
Oracle Linux 8 firefox +1 102.8.0-2.0.1.el8_7 ELSA-2023-0821, ELSA-2023-0808
Oracle Linux 8 nss +9 3.79.0-11.el8_7 ELSA-2023-1252
Oracle Linux 7 firefox +1 102.8.0-2.0.1.el7_9 ELSA-2023-0817, ELSA-2023-0812
Oracle Linux 7 nss +4 3.79.0-5.el7_9 ELSA-2023-1332

Advisories 50

References