Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-5171HistorySep 27, 2023 - 3:19 p.m.
CVE-2023-5171
2023-09-2715:19:42
Alpine Linux Development Team
security.alpinelinux.org
11
ion compilation
garbage collection
use-after-free
nul bytes
exploitable crash
firefox
firefox esr
thunderbird
unix
0.001 Low
EPSS
Percentile
30.7%
During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | firefox-esr | < 115.3.0-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | firefox-esr | < 115.3.0-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | firefox-esr | < 115.3.0-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | firefox-esr | < 115.3.0-r0 | UNKNOWN |
Related
debiancve
debiancve
CVE-2023-5171
2023-09-27 15:19:42
veracode
veracode
Denial Of Service (DoS)
2023-10-02 19:12:51
cve
cve
CVE-2023-5171
2023-09-27 15:19:42
redhatcve
redhatcve
CVE-2023-5171
2023-09-27 06:54:25
ubuntucve
ubuntucve
CVE-2023-5171
2023-09-28 00:00:00
prion
prion
Design/Logic Flaw
2023-09-27 15:19:00
cvelist
cvelist
CVE-2023-5171
2023-09-27 14:13:12
nessus
nessus
Debian DSA-5513-1 : thunderbird - security update
2023-10-03 00:00:00
Debian DSA-5506-1 : firefox-esr - security update
2023-09-29 00:00:00
Debian DLA-3587-1 : firefox-esr - LTS security update
2023-09-29 00:00:00
osv
osv
firefox-esr - security update
2023-09-28 00:00:00
firefox-esr - security update
2023-09-29 00:00:00
thunderbird - security update
2023-10-03 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3587-1)
2023-10-02 00:00:00
Debian: Security Advisory (DSA-5506-1)
2023-09-29 00:00:00
debian
debian
[SECURITY] [DLA 3587-1] firefox-esr security update
2023-09-29 12:33:31
[SECURITY] [DSA 5513-1] thunderbird security update
2023-10-03 15:53:49
[SECURITY] [DSA 5506-1] firefox-esr security update
2023-09-28 18:46:14
fedora
fedora
[SECURITY] Fedora 39 Update: firefox-118.0.1-4.fc39
2023-10-05 21:16:09
mageia
mageia
Updated Firefox and Thunderbird packages fix security vulnerabilities
2023-10-10 20:21:41
redhat
redhat
(RHSA-2023:5440) Important: firefox security update
2023-10-04 11:13:53
(RHSA-2023:5434) Important: firefox security update
2023-10-04 10:52:28
(RHSA-2023:5432) Important: thunderbird security update
2023-10-04 10:50:12
oraclelinux
oraclelinux
thunderbird security update
2023-10-05 00:00:00
firefox security update
2023-10-13 00:00:00
thunderbird security update
2023-10-13 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2023-09-26 19:39:20
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 115.3 — Mozilla
2023-09-26 00:00:00
Security Vulnerabilities fixed in Thunderbird 115.3 — Mozilla
2023-09-26 00:00:00
Security Vulnerabilities fixed in Firefox 118 — Mozilla
2023-09-26 00:00:00
almalinux
almalinux
Important: firefox security update
2023-10-04 00:00:00
Important: thunderbird security update
2023-10-04 00:00:00
kaspersky
kaspersky
KLA60813 Multiple vulnerabilities in Mozilla Firefox ESR
2023-09-26 00:00:00
KLA60814 Multiple vulnerabilities in Mozilla Thunderbird
2023-09-26 00:00:00
KLA60812 Multiple vulnerabilities in Mozilla Firefox
2023-09-26 00:00:00
rocky
rocky
thunderbird security update
2023-10-05 21:35:58
thunderbird security update
2023-10-05 21:35:15
ubuntu
ubuntu
Firefox vulnerabilities
2023-10-03 00:00:00
Firefox regressions
2023-10-11 00:00:00
Thunderbird vulnerabilities
2023-10-03 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2371
2024-03-12 12:37:38
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2024-02-19 00:00:00
ibm
ibm