Lucene search
PRIOn knowledge basePRION:CVE-2023-4048HistoryAug 01, 2023 - 3:15 p.m.
Design/Logic Flaw
2023-08-0115:15:00
PRIOn knowledge base
www.prio-n.com
4
out-of-bounds read
exploitable crash
html parsing
domparser
firefox vulnerability
low memory
An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 10.0 | |
| debian_linux | eq | 11.0 | |
| debian_linux | eq | 12.0 | |
| firefox | lt | 116.0 | |
| firefox_esr | ge | 115.0 | |
| firefox_esr | lt | 115.1 | |
| firefox_esr | ge | 102.0 | |
| firefox_esr | lt | 102.14 |
References
bugzilla.mozilla.org/show_bug.cgi?id=1841368
lists.debian.org/debian-lts-announce/2023/08/msg00008.html
lists.debian.org/debian-lts-announce/2023/08/msg00010.html
www.debian.org/security/2023/dsa-5464
www.debian.org/security/2023/dsa-5469
www.mozilla.org/security/advisories/mfsa2023-29/
www.mozilla.org/security/advisories/mfsa2023-30/
www.mozilla.org/security/advisories/mfsa2023-31/
Related
alpinelinux
alpinelinux
CVE-2023-4048
2023-08-01 15:15:09
debiancve
debiancve
CVE-2023-4048
2023-08-01 15:15:09
redhatcve
redhatcve
CVE-2023-4048
2023-08-02 08:28:13
cvelist
cvelist
CVE-2023-4048
2023-08-01 14:57:48
cnvd
cnvd
cve
cve
CVE-2023-4048
2023-08-01 15:15:09
veracode
veracode
Denial Of Service (DoS)
2023-08-06 12:06:38
nvd
nvd
CVE-2023-4048
2023-08-01 15:15:09
ubuntucve
ubuntucve
CVE-2023-4048
2023-08-01 00:00:00
debian
debian
[SECURITY] [DSA 5469-1] thunderbird security update
2023-08-05 20:47:00
[SECURITY] [DLA 3521-1] thunderbird security update
2023-08-08 10:13:27
[SECURITY] [DLA 3523-1] firefox-esr security update
2023-08-09 19:05:02
osv
osv
thunderbird - security update
2023-08-08 00:00:00
firefox-esr - security update
2023-08-09 00:00:00
firefox-esr - security update
2023-08-03 00:00:00
nessus
nessus
Debian DSA-5469-1 : thunderbird - security update
2023-08-07 00:00:00
Debian DSA-5464-1 : firefox-esr - security update
2023-08-04 00:00:00
Debian DLA-3521-1 : thunderbird - LTS security update
2023-08-08 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5464-1)
2023-08-04 00:00:00
Debian: Security Advisory (DSA-5469-1)
2023-08-07 00:00:00
Debian: Security Advisory (DLA-3523-1)
2023-08-10 00:00:00
kaspersky
kaspersky
KLA51618 Multiple vulnerabilities in Mozilla Thunderbird
2023-08-02 00:00:00
KLA51574 Multiple vulnerabilities in Mozilla Firefox ESR
2023-08-01 00:00:00
KLA51619 Multiple vulnerabilities in Mozilla Firefox ESR
2023-08-01 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 102.14 — Mozilla
2023-08-02 00:00:00
Security Vulnerabilities fixed in Firefox ESR 102.14 — Mozilla
2023-08-01 00:00:00
Security Vulnerabilities fixed in Firefox ESR 115.1 — Mozilla
2023-08-01 00:00:00
oraclelinux
oraclelinux
firefox security update
2023-08-04 00:00:00
firefox security update
2023-08-04 00:00:00
firefox security update
2023-08-06 00:00:00
redhat
redhat
(RHSA-2023:4463) Important: firefox security update
2023-08-03 12:38:01
(RHSA-2023:4462) Important: firefox security update
2023-08-03 12:36:23
(RHSA-2023:4465) Important: firefox security update
2023-08-03 12:42:58
ubuntu
ubuntu
Thunderbird vulnerabilities
2023-09-04 00:00:00
Firefox regressions
2023-08-21 00:00:00
Firefox regressions
2023-08-08 00:00:00
rocky
rocky
firefox security update
2023-08-08 12:35:00
firefox security update
2023-08-08 12:34:07
thunderbird security update
2023-08-08 12:35:00
almalinux
almalinux
Important: firefox security update
2023-08-03 00:00:00
Important: firefox security update
2023-08-03 00:00:00
Important: thunderbird security update
2023-08-07 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2233
2023-09-12 11:49:48
Advisory ROSA-SA-2023-2232
2023-09-12 11:49:20
slackware
slackware
[slackware-security] mozilla-firefox
2023-08-04 20:52:54
redos
redos
ROS-20230908-07
2023-09-08 00:00:00
ROS-20230919-04
2023-09-19 00:00:00
mageia
mageia
Updated firefox/thunderbird packages fix security vulnerability
2023-09-25 01:16:18
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2024-02-19 00:00:00
ibm
ibm