Lucene search
AlmaLinuxALSA-2023:5200HistorySep 18, 2023 - 12:00 a.m.
Important: firefox security update
2023-09-1800:00:00
errata.almalinux.org
13
mozilla firefox
security update
version 102.15.1 esr
libwebp
heap buffer overflow
cve-2023-4863
references
unix
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.65 Medium
EPSS
Percentile
97.9%
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.
This update upgrades Firefox to version 102.15.1 ESR.
Security Fix(es):
- libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | x86_64 | firefox | < 102.15.1-1.el9_2.alma | firefox-102.15.1-1.el9_2.alma.x86_64.rpm |
| almalinux | 9 | x86_64 | firefox-x11 | < 102.15.1-1.el9_2.alma | firefox-x11-102.15.1-1.el9_2.alma.x86_64.rpm |
| almalinux | 9 | ppc64le | firefox-x11 | < 102.15.1-1.el9_2.alma | firefox-x11-102.15.1-1.el9_2.alma.ppc64le.rpm |
| almalinux | 9 | ppc64le | firefox | < 102.15.1-1.el9_2.alma | firefox-102.15.1-1.el9_2.alma.ppc64le.rpm |
| almalinux | 9 | aarch64 | firefox-x11 | < 102.15.1-1.el9_2.alma | firefox-x11-102.15.1-1.el9_2.alma.aarch64.rpm |
| almalinux | 9 | aarch64 | firefox | < 102.15.1-1.el9_2.alma | firefox-102.15.1-1.el9_2.alma.aarch64.rpm |
| almalinux | 9 | s390x | firefox | < 102.15.1-1.el9_2.alma | firefox-102.15.1-1.el9_2.alma.s390x.rpm |
| almalinux | 9 | s390x | firefox-x11 | < 102.15.1-1.el9_2.alma | firefox-x11-102.15.1-1.el9_2.alma.s390x.rpm |
Related
gitlab
gitlab
CefSharp affected by heap buffer overflow in WebP
2023-09-21 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2023-09-19 00:00:00
thunderbird security update
2023-09-19 00:00:00
firefox security update
2023-09-19 00:00:00
osv
osv
Important: firefox security update
2023-09-19 12:09:00
Important: firefox security update
2023-09-18 00:00:00
libwebp - security update
2023-09-18 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2024-1401)
2024-03-21 00:00:00
Mozilla Firefox ESR Security Advisories (MFSA2023-29, MFSA2023-12) - Windows
2023-09-14 00:00:00
nessus
nessus
Google Chrome < 116.0.5845.187 Vulnerability
2023-09-11 00:00:00
Slackware Linux 15.0 / current seamonkey Vulnerability (SSA:2023-264-03)
2023-09-21 00:00:00
EulerOS Virtualization 2.9.0 : libwebp (EulerOS-SA-2024-1014)
2024-01-16 00:00:00
ubuntucve
ubuntucve
CVE-2023-4863
2023-09-12 00:00:00
slackware
slackware
[slackware-security] libwebp
2023-09-14 21:21:47
[slackware-security] mozilla-thunderbird
2023-09-14 02:32:34
[slackware-security] seamonkey
2023-09-21 19:43:16
ubuntu
ubuntu
libwebp vulnerability
2023-09-14 00:00:00
libwebp vulnerability
2023-09-28 00:00:00
Firefox vulnerability
2023-09-14 00:00:00
veracode
veracode
Heap Buffer Overflow
2023-09-19 21:25:54
Heap Buffer Overflow
2023-09-15 13:45:13
almalinux
almalinux
Important: libwebp security update
2023-09-20 00:00:00
Important: thunderbird security update
2023-09-19 00:00:00
redhat
redhat
(RHSA-2023:5222) Important: libwebp security update
2023-09-19 07:11:07
mscve
mscve
Chromium: CVE-2023-4863 Heap buffer overflow in WebP
2023-09-12 07:00:47
ics
ics
Siemens Mendix Studio Pro
2023-11-16 12:00:00
redhatcve
redhatcve
CVE-2023-4863
2023-09-14 14:24:56
debian
debian
[SECURITY] [DSA 5496-1] firefox-esr security update
2023-09-13 20:46:32
[SECURITY] [DSA 5498-1] thunderbird security update
2023-09-15 16:40:56
[SECURITY] [DSA 5497-1] libwebp security update
2023-09-13 21:07:56
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Google Chrome
2024-02-03 12:27:37
Exploit for Out-of-bounds Write in Google Chrome
2023-11-11 06:51:03
Exploit for Out-of-bounds Write in Google Chrome
2023-09-21 05:22:51
github
github
sharp vulnerability in libwebp dependency CVE-2023-4863
2023-11-16 17:14:15
libwebp: OOB write in BuildHuffmanTable
2023-09-12 15:30:20
hivepro
hivepro
Google Addresses Fourth Zero-Day Flaw Exploited by Attackers Wildly
2023-09-12 13:05:09
ibm
ibm
alpinelinux
alpinelinux
CVE-2023-4863
2023-09-12 15:15:24
cloudfoundry
cloudfoundry
USN-6369-1: libwebp vulnerability | Cloud Foundry
2023-10-12 00:00:00
wolfi
wolfi
CVE-2023-4863 vulnerabilities
2024-06-16 09:08:15
debiancve
debiancve
CVE-2023-4863
2023-09-12 15:15:24
amazon
amazon
Important: qt5-qtimageformats
2023-11-09 19:19:00
Important: libwebp12
2023-10-12 15:08:00
fedora
fedora
[SECURITY] Fedora 37 Update: libwebp-1.3.1-3.fc37
2023-09-16 01:41:44
[SECURITY] Fedora 39 Update: libwebp-1.3.1-3.fc39
2023-09-15 19:54:26
[SECURITY] Fedora 39 Update: firefox-117.0.1-2.fc39
2023-09-17 00:15:26
freebsd
freebsd
graphics/webp heap buffer overflow
2023-09-12 00:00:00
libwebp heap buffer overflow
2023-09-12 00:00:00
attackerkb
attackerkb
CVE-2023-4863
2023-09-12 00:00:00
hp
hp
prion
prion
Heap overflow
2023-09-12 15:15:00
kaspersky
kaspersky
KLA61312 DoS vulnerability in Opera
2023-09-13 00:00:00
KLA60569 DoS vulnerablity in Microsoft Browser
2023-09-12 00:00:00
KLA60003 DoS vulnerability in Google Chrome
2023-09-11 00:00:00
paloalto
paloalto
Impact of libwebp Vulnerability CVE-2023-4863
2023-10-02 23:40:00
cvelist
cvelist
CVE-2023-4863
2023-09-12 14:24:59
cgr
cgr
CVE-2023-4863 vulnerabilities
2024-05-19 03:07:16
mageia
mageia
Updated libwebp packages fix a security vulnerability
2023-10-03 13:53:29
nvd
nvd
CVE-2023-4863
2023-09-12 15:15:24
cve
cve
CVE-2023-4863
2023-09-12 15:15:24
thn
thn
chrome
chrome
Stable Channel Update for Desktop
2023-09-11 00:00:00
rocky
rocky
firefox security update
2023-09-19 12:09:00
cnvd
cnvd
Google Chrome Buffer Overflow Vulnerability (CNVD-2023-71680)
2023-09-15 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.65 Medium
EPSS
Percentile
97.9%
Related for ALSA-2023:5200