Lucene search
Alpine Linux Development TeamALPINE:CVE-2024-8394HistorySep 06, 2024 - 5:15 p.m.
CVE-2024-8394
2024-09-0617:15:18
Alpine Linux Development Team
security.alpinelinux.org
1
otr chat
use-after-free
thunderbird
vulnerability
crash
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
17.7%
When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 128.2.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.20-community | noarch | thunderbird | = 128.0.1-r0 | UNKNOWN |
Related
vulnrichment
vulnrichment
CVE-2024-8394
2024-09-06 16:16:34
cvelist
cvelist
CVE-2024-8394
2024-09-06 16:16:34
nvd
nvd
CVE-2024-8394
2024-09-06 17:15:18
redhatcve
redhatcve
CVE-2024-8394
2024-09-06 21:41:04
cve
cve
CVE-2024-8394
2024-09-06 17:15:18
osv
osv
CVE-2024-8394
2024-09-06 17:15:18
Important: thunderbird security update
2024-09-17 00:54:54
debiancve
debiancve
CVE-2024-8394
2024-09-06 17:15:18
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 128.2 — Mozilla
2024-09-03 00:00:00
nessus
nessus
Mozilla Thunderbird < 128.2
2024-09-06 00:00:00
Mozilla Thunderbird < 128.2
2024-09-06 00:00:00
Fedora 40 : thunderbird (2024-a27e8b69a0)
2024-09-09 00:00:00
kaspersky
kaspersky
KLA73182 Multiple vulnerabilities in Mozilla Thunderbird
2024-09-03 00:00:00
rocky
rocky
thunderbird security update
2024-09-17 00:54:54
redhat
redhat
(RHSA-2024:6683) Important: thunderbird security update
2024-09-16 11:10:47
(RHSA-2024:6721) Important: thunderbird security update
2024-09-17 11:09:20
(RHSA-2024:6723) Important: thunderbird security update
2024-09-17 11:09:33
oraclelinux
oraclelinux
thunderbird security update
2024-09-18 00:00:00
thunderbird security update
2024-09-18 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
17.7%
Related for ALPINE:CVE-2024-8394