Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-2608
HistoryMar 19, 2024 - 12:15 p.m.

CVE-2024-2608

2024-03-1912:15:08
Alpine Linux Development Team
security.alpinelinux.org
8
integer overflow
buffer underallocation
out of bounds write
unix

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding() and AppendEncodedCharacters() could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

OSVersionArchitecturePackageVersionFilename
Alpine3.18-communitynoarchfirefox-esr< 115.9.0-r0UNKNOWN
Alpine3.19-communitynoarchfirefox-esr< 115.9.0-r0UNKNOWN