Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2024-5693HistoryJun 11, 2024 - 1:15 p.m.
CVE-2024-5693
2024-06-1113:15:50
Debian Security Bug Tracker
security-tracker.debian.org
6
offscreen canvas
cross-origin
tainting
vulnerability
firefox
same-origin policy
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
5.3
Confidence
Low
EPSS
0
Percentile
10.3%
Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 127.0-1 | firefox_127.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 115.12.0esr-1~deb12u1 | firefox-esr_115.12.0esr-1~deb12u1_all.deb |
| Debian | 11 | all | firefox-esr | < 115.12.0esr-1~deb11u1 | firefox-esr_115.12.0esr-1~deb11u1_all.deb |
| Debian | 999 | all | firefox-esr | < 115.12.0esr-1 | firefox-esr_115.12.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 115.12.0esr-1 | firefox-esr_115.12.0esr-1_all.deb |
| Debian | 12 | all | thunderbird | < 1:115.12.0-1~deb12u1 | thunderbird_1:115.12.0-1~deb12u1_all.deb |
| Debian | 11 | all | thunderbird | < 1:115.12.0-1~deb11u1 | thunderbird_1:115.12.0-1~deb11u1_all.deb |
| Debian | 999 | all | thunderbird | < 1:115.12.0-1 | thunderbird_1:115.12.0-1_all.deb |
| Debian | 13 | all | thunderbird | < 1:115.12.0-1 | thunderbird_1:115.12.0-1_all.deb |
Related
osv
osv
CGA-2qrh-m58r-8532
2024-07-15 21:50:28
CGA-m89r-85rg-prfp
2024-07-15 22:02:10
CVE-2024-5693
2024-06-11 00:00:00
alpinelinux
alpinelinux
CVE-2024-5693
2024-06-11 13:15:50
redhatcve
redhatcve
CVE-2024-5693
2024-06-11 20:54:06
ubuntucve
ubuntucve
CVE-2024-5693
2024-06-11 00:00:00
vulnrichment
vulnrichment
CVE-2024-5693
2024-06-11 12:40:13
nvd
nvd
CVE-2024-5693
2024-06-11 13:15:50
cvelist
cvelist
CVE-2024-5693
2024-06-11 12:40:13
cve
cve
CVE-2024-5693
2024-06-11 13:15:50
wolfi
wolfi
CVE-2024-5693 vulnerabilities
2024-09-20 21:14:10
nessus
nessus
AlmaLinux 8 : firefox (ALSA-2024:3954)
2024-06-19 00:00:00
RHEL 9 : firefox (RHSA-2024:3958)
2024-06-17 00:00:00
RHEL 9 : firefox (RHSA-2024:3955)
2024-06-17 00:00:00
oraclelinux
oraclelinux
firefox security update
2024-06-17 00:00:00
firefox security update
2024-06-17 00:00:00
firefox security update
2024-06-17 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0231)
2024-06-24 00:00:00
Debian: Security Advisory (DSA-5711-1)
2024-07-01 00:00:00
Debian: Security Advisory (DSA-5709-1)
2024-07-01 00:00:00
redhat
redhat
(RHSA-2024:4004) Important: thunderbird security update
2024-06-20 05:20:16
(RHSA-2024:4016) Important: thunderbird security update
2024-06-20 07:47:31
(RHSA-2024:3949) Important: firefox security update
2024-06-17 12:45:16
ubuntu
ubuntu
Thunderbird vulnerabilities
2024-06-19 00:00:00
Firefox vulnerabilities
2024-07-03 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2024-06-22 20:32:46
Updated nss & firefox packages fix security vulnerabilities
2024-06-16 02:07:50
rocky
rocky
firefox security update
2024-07-02 14:10:24
thunderbird security update
2024-07-02 14:10:24
thunderbird security update
2024-07-02 14:11:35
almalinux
almalinux
Important: thunderbird security update
2024-06-20 00:00:00
Important: firefox security update
2024-06-17 00:00:00
Important: thunderbird security update
2024-06-20 00:00:00
debian
debian
[SECURITY] [DLA 3825-1] firefox-esr security update
2024-06-13 11:08:20
kaspersky
kaspersky
KLA68920 Multiple vulnerabilities in Mozilla Firefox ESR
2024-06-11 00:00:00
KLA68933 Multiple vulnerabilities in Mozilla Thunderbird
2024-06-13 00:00:00
KLA68921 Multiple vulnerabilities in Mozilla Firefox
2024-06-11 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 115.12 — Mozilla
2024-06-11 00:00:00
Security Vulnerabilities fixed in Thunderbird 115.12 — Mozilla
2024-06-13 00:00:00
Security Vulnerabilities fixed in Firefox 127 — Mozilla
2024-06-11 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2024-06-11 21:55:08
redos
redos
ROS-20240814-05
2024-08-14 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2024-08-06 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
5.3
Confidence
Low
EPSS
0
Percentile
10.3%
Related for DEBIANCVE:CVE-2024-5693