The vulnerability of the JIT WebAssembly component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, allows a hacker to trigger a service failure.

🗓️ 05 May 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

A WebAssembly engine vulnerability in Thunderbird and Firefox due to incorrect calculations allows remote attackers to trigger service interruptions.

Reporter	Title	Published	Views	Family All 183
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 78.10.0-alt1	21 Apr 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 78.10.0-alt1	26 Apr 202100:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2021-1644)	24 May 202100:00	–	nessus
Tenable Nessus	CentOS 8 : thunderbird (CESA-2021:1353)	27 Apr 202100:00	–	nessus
Tenable Nessus	CentOS 8 : firefox (CESA-2021:1360)	3 May 202100:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2021:1350)	9 Oct 202400:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2021:1363)	9 Oct 202400:00	–	nessus
Tenable Nessus	Debian DLA-2632-1 : thunderbird security update	23 Apr 202100:00	–	nessus
Tenable Nessus	Debian DLA-2633-1 : firefox-esr security update	27 Apr 202100:00	–	nessus
Tenable Nessus	Debian DSA-4895-1 : firefox-esr - security update	22 Apr 202100:00	–	nessus

Vulners

Node

novell suse_openstack_cloudMatch8

OR

novell suse_enterprise_storageMatch6

OR

novell hpe_helion_openstackMatch8

OR

novell suse_openstack_cloudMatch9

OR

novell suse_linux_enterprise_high_performance_computingMatch15-espos

OR

novell suse_linux_enterprise_high_performance_computingMatch15-ltss

OR

novell suse_caas_platformMatch4.0

OR

novell suse_manager_proxyMatch4.0

OR

novell suse_manager_retail_branch_serverMatch4.0

OR

novell suse_manager_serverMatch4.0

OR

mozilla thunderbirdRange<78.10

OR

mozilla firefoxRange<88

OR

mozilla firefox_esrRange<78.10

OR

red_hat red_hat_enterprise_linuxMatch7

OR

red_hat red_hat_enterprise_linuxMatch8

OR

novell suse_linux_enterprise_server_for_sap_applicationsMatch15

OR

novell suse_linux_enterprise_serverMatch15-ltss

OR

canonical ubuntuMatch20.10

OR

novell opensuse_leapMatch15.2

OR

canonical ubuntuMatch21.04

Source	Link
access	www.access.redhat.com/security/cve/CVE-2021-29945
redos	www.redos.red-soft.ru/updatesec/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-29945
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
ubuntu	www.ubuntu.com/security/notices/USN-4926-1
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021041920
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-14/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-15/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2021-16/
suse	www.suse.com/security/cve/CVE-2021-29945/

16 Sep 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 22.6

CVSS 33.1

EPSS0.01208

WebAssembly engine Thunderbird Firefox browser Firefox ESR incorrect calculations remote attacker service interruption