Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-5690
HistoryJun 11, 2024 - 1:15 p.m.

CVE-2024-5690

2024-06-1113:15:50
Alpine Linux Development Team
security.alpinelinux.org
1
monitoring operations
attacker guess
unix
firefox esr
cve-2024-5690

5.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user’s system. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

OSVersionArchitecturePackageVersionFilename
Alpine3.20-communitynoarchfirefox= 126.0.1-r0UNKNOWN
Alpine3.20-communitynoarchthunderbird= 115.11.0-r0UNKNOWN