Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-23994HistoryJun 24, 2021 - 2:15 p.m.
CVE-2021-23994
2021-06-2414:15:09
Debian Security Bug Tracker
security-tracker.debian.org
26
webgl
memory corruption
firefox esr
thunderbird
out of bound write
vulnerability
unix
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
69.9%
A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 88.0-1 | firefox_88.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 78.10.0esr-1 | firefox-esr_78.10.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 78.10.0esr-1 | firefox-esr_78.10.0esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 78.10.0esr-1 | firefox-esr_78.10.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 78.10.0esr-1 | firefox-esr_78.10.0esr-1_all.deb |
| Debian | 12 | all | thunderbird | < 1:78.10.0-1 | thunderbird_1:78.10.0-1_all.deb |
| Debian | 11 | all | thunderbird | < 1:78.10.0-1 | thunderbird_1:78.10.0-1_all.deb |
| Debian | 999 | all | thunderbird | < 1:78.10.0-1 | thunderbird_1:78.10.0-1_all.deb |
| Debian | 13 | all | thunderbird | < 1:78.10.0-1 | thunderbird_1:78.10.0-1_all.deb |
Related
cvelist
cvelist
CVE-2021-23994
2021-06-24 13:26:33
redhatcve
redhatcve
CVE-2021-23994
2021-04-20 03:20:46
nvd
nvd
CVE-2021-23994
2021-06-24 14:15:09
ubuntucve
ubuntucve
CVE-2021-23994
2021-04-19 00:00:00
alpinelinux
alpinelinux
CVE-2021-23994
2021-06-24 14:15:09
prion
prion
Memory corruption
2021-06-24 14:15:00
cve
cve
CVE-2021-23994
2021-06-24 14:15:09
veracode
veracode
Denial Of Service (DoS)
2021-04-21 18:13:37
ibm
ibm
openvas
openvas
Mozilla Firefox ESR Security Advisories (MFSA2021-13, MFSA2021-16) - Windows
2021-04-20 00:00:00
Debian: Security Advisory (DSA-4895-1)
2021-04-22 00:00:00
nessus
nessus
RHEL 8 : firefox (RHSA-2021:1361)
2021-04-26 00:00:00
Oracle Linux 7 : firefox (ELSA-2021-1363)
2021-04-27 00:00:00
NewStart CGSL MAIN 6.02 : firefox Multiple Vulnerabilities (NS-SA-2021-0131)
2021-10-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 78.10.0-alt1
2021-04-21 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 78.10.0-alt1
2021-04-26 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2021-04-26 00:00:00
Security update for MozillaThunderbird (important)
2021-05-01 00:00:00
oraclelinux
oraclelinux
firefox security update
2021-04-27 00:00:00
firefox security update
2021-04-27 00:00:00
thunderbird security update
2021-04-27 00:00:00
redhat
redhat
(RHSA-2021:1363) Important: firefox security update
2021-04-26 10:29:25
(RHSA-2021:1360) Important: firefox security update
2021-04-26 10:29:07
(RHSA-2021:1362) Important: firefox security update
2021-04-26 10:29:17
osv
osv
firefox-esr - security update
2021-04-23 00:00:00
Red Hat Security Advisory: firefox security update
2024-09-16 05:44:43
firefox-esr - security update
2021-04-20 00:00:00
archlinux
archlinux
[ASA-202104-4] thunderbird: multiple issues
2021-04-29 00:00:00
[ASA-202104-3] firefox: multiple issues
2021-04-29 00:00:00
debian
debian
[SECURITY] [DSA 4895-1] firefox-esr security update
2021-04-20 18:17:37
[SECURITY] [DLA 2633-1] firefox-esr security update
2021-04-23 10:43:12
[SECURITY] [DSA 4897-1] thunderbird security update
2021-04-22 09:31:32
mageia
mageia
Updated firefox packages fix security vulnerabilities
2021-04-29 12:41:35
Updated thunderbird packages fix security vulnerabilities
2021-04-29 12:41:35
kaspersky
kaspersky
KLA12150 Multiple vulnerabilities in Mozilla Firefox ESR
2021-04-19 00:00:00
KLA12148 Multiple vulnerabilities in Mozilla Thunderbird
2021-04-19 00:00:00
KLA12149 Multiple vulnerabilities in Mozilla Firefox
2021-04-19 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 78.10 — Mozilla
2021-04-19 00:00:00
Security Vulnerabilities fixed in Thunderbird 78.10 — Mozilla
2021-04-19 00:00:00
Security Vulnerabilities fixed in Firefox 88 — Mozilla
2021-04-19 00:00:00
almalinux
almalinux
Important: firefox security update
2021-04-26 10:29:07
Important: thunderbird security update
2021-04-26 05:03:41
redos
redos
amazon
amazon
Important: thunderbird
2021-05-20 17:05:00
ubuntu
ubuntu
Firefox vulnerabilities
2021-04-26 00:00:00
Thunderbird vulnerabilities
2021-06-25 00:00:00
Thunderbird vulnerabilities
2021-06-22 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2021-04-30 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2021-04-30 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
69.9%
Related for DEBIANCVE:CVE-2021-23994