Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-5172HistorySep 27, 2023 - 3:19 p.m.
CVE-2023-5172
2023-09-2715:19:42
Debian Security Bug Tracker
security-tracker.debian.org
16
ion engine hashtable mutation unix cve-2023-5172
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
30.0%
A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox < 118.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 118.0-1 | firefox_118.0-1_all.deb |
Related
cve
cve
CVE-2023-5172
2023-09-27 15:19:42
ubuntucve
ubuntucve
CVE-2023-5172
2023-09-28 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-10-08 08:08:02
cvelist
cvelist
CVE-2023-5172
2023-09-27 14:13:33
alpinelinux
alpinelinux
CVE-2023-5172
2023-09-27 15:19:00
cnvd
cnvd
Mozilla Firefox Memory Misreference Vulnerability (CNVD-2023-75343)
2023-10-07 00:00:00
nvd
nvd
CVE-2023-5172
2023-09-27 15:19:42
prion
prion
Design/Logic Flaw
2023-09-27 15:19:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2023-41) - Linux
2023-09-26 00:00:00
Ubuntu: Security Advisory (USN-6404-2)
2023-10-12 00:00:00
Ubuntu: Security Advisory (USN-6404-1)
2023-10-04 00:00:00
osv
osv
firefox vulnerabilities
2023-10-03 06:27:06
firefox regressions
2023-10-11 03:15:55
ubuntu
ubuntu
Firefox regressions
2023-10-11 00:00:00
Firefox vulnerabilities
2023-10-03 00:00:00
nessus
nessus
Ubuntu 20.04 LTS : Firefox vulnerabilities (USN-6404-1)
2023-10-03 00:00:00
Mozilla Firefox < 118.0
2023-09-26 00:00:00
Fedora 38 : firefox (2023-587dc80bb1)
2023-09-28 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 118 — Mozilla
2023-09-26 00:00:00
kaspersky
kaspersky
KLA60812 Multiple vulnerabilities in Mozilla Firefox
2023-09-26 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2371
2024-03-12 12:37:38
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2024-01-07 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
30.0%
Related for DEBIANCVE:CVE-2023-5172