Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:6187
HistoryOct 30, 2023 - 4:30 p.m.

(RHSA-2023:6187) Important: firefox security update

2023-10-3016:30:34
CWE-120
access.redhat.com
13
mozilla firefox
security update
version 115.4.0
open-source
web browser
cve-2023-5721
cve-2023-5730
cve-2023-44488
cve-2023-5724
cve-2023-5725
cve-2023-5728
cve-2023-5732
unix

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.003

Percentile

69.1%

JSON

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.4.0 ESR.

Security Fix(es):

  • Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

  • Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730)

  • libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

  • Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

  • Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

  • Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728)

  • Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected configurations

Vulners
Node
redhatfirefoxRange≤115.4.0-1.el7_9
OR
redhatfirefoxRange≤115.4.0-1.el8_8
OR
redhatthunderbirdRange≤115.4.1-1.el8_8
OR
redhatfirefox-0Range≤115.4.0-1.el8_1
OR
redhatthunderbird-0Range≤115.4.1-1.el8_1
OR
redhatfirefox-0Range≤115.4.0-1.el8_2
OR
redhatthunderbird-0Range≤115.4.1-1.el8_2
OR
redhatthunderbird-0Range≤115.4.1-1.el8_4
OR
redhatfirefox-0Range≤115.4.0-1.el8_6
OR
redhatthunderbird-0Range≤115.4.1-1.el8_6
OR
redhatfirefoxRange≤115.4.0-1.el9_2
OR
redhatthunderbirdRange≤115.4.1-1.el9_2
OR
redhatfirefox-0Range≤115.4.0-1.el9_0
OR
redhatlibvpxRange≤1.7.0-10.el8_8
OR
redhatlibvpx-0Range≤1.7.0-8.el8_1
OR
redhatlibvpx-0Range≤1.7.0-8.el8_2
OR
redhatlibvpx-0Range≤1.7.0-10.el8_4
OR
redhatfirefox-0Range≤115.4.0-1.el8_4
OR
redhatlibvpx-0Range≤1.7.0-10.el8_6
OR
redhatlibvpxRange≤1.9.0-7.el9_2
OR
redhatlibvpx-0Range≤1.9.0-7.el9_0
OR
redhatthunderbird-0Range≤115.4.1-1.el9_0
AND
redhatenterprise_linuxMatch7
OR
redhatenterprise_linuxMatch8
OR
redhatenterprise_linuxMatch9
VendorProductVersionCPE
redhatfirefox*cpe:2.3:a:redhat:firefox:*:*:*:*:*:*:*:*
redhatthunderbird*cpe:2.3:a:redhat:thunderbird:*:*:*:*:*:*:*:*
redhatfirefox-0*cpe:2.3:a:redhat:firefox-0:*:*:*:*:*:*:*:*
redhatthunderbird-0*cpe:2.3:a:redhat:thunderbird-0:*:*:*:*:*:*:*:*
redhatlibvpx*cpe:2.3:a:redhat:libvpx:*:*:*:*:*:*:*:*
redhatlibvpx-0*cpe:2.3:a:redhat:libvpx-0:*:*:*:*:*:*:*:*
redhatenterprise_linux7cpe:2.3:o:redhat:enterprise_linux:7:*:*:*:*:*:*:*
redhatenterprise_linux8cpe:2.3:o:redhat:enterprise_linux:8:*:*:*:*:*:*:*
redhatenterprise_linux9cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:*

Related

redhat 14
osv 31
rocky 1
nessus 61
almalinux 4
oraclelinux 6
debian 5
mageia 3
openvas 23
redos 2
ubuntu 3
amazon 2
slackware 2
kaspersky 3
mozilla 3
prion 5
nvd 3
ubuntucve 3
cve 4
redhatcve 4
cvelist 3
alpinelinux 3
debiancve 3
vulnrichment 3
veracode 3
githubexploit 1
cbl_mariner 1
redhat
redhat
(RHSA-2023:6196) Important: thunderbird security update
2023-10-30 16:39:37
(RHSA-2023:6189) Important: firefox security update
2023-10-30 16:33:08
(RHSA-2023:6194) Important: thunderbird security update
2023-10-30 16:37:40
osv
osv
Red Hat Security Advisory: thunderbird security update
2024-09-16 15:15:08
Red Hat Security Advisory: firefox security update
2024-09-16 15:14:57
Important: firefox security update
2023-10-30 00:00:00
rocky
rocky
firefox security update
2023-11-11 23:00:15
nessus
nessus
RHEL 8 : firefox (RHSA-2023:6185)
2023-10-30 00:00:00
Oracle Linux 7 : firefox (ELSA-2023-6162)
2023-10-30 00:00:00
RHEL 8 : thunderbird (RHSA-2023:6194)
2023-10-30 00:00:00
almalinux
almalinux
Important: firefox security update
2023-10-30 00:00:00
Important: thunderbird security update
2023-10-30 00:00:00
Important: firefox security update
2023-10-30 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2023-10-31 00:00:00
thunderbird security update
2023-10-31 00:00:00
firefox security update
2023-10-31 00:00:00
debian
debian
[SECURITY] [DSA 5538-1] thunderbird security update
2023-10-28 12:34:11
[SECURITY] [DLA 3637-1] thunderbird security update
2023-10-29 09:05:55
[SECURITY] [DSA 5535-1] firefox-esr security update
2023-10-25 19:14:08
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2023-11-07 02:08:32
Updated nss and firefox packages fix security vulnerabilities
2023-11-07 02:08:32
Updated libvpx packages fix a security vulnerability
2023-12-04 11:28:24
openvas
openvas
Debian: Security Advisory (DSA-5538-1)
2023-10-30 00:00:00
Mageia: Security Advisory (MGASA-2023-0308)
2023-11-07 00:00:00
Mageia: Security Advisory (MGASA-2023-0309)
2023-11-07 00:00:00
redos
redos
ROS-20240924-01
2024-09-24 00:00:00
ROS-20231016-02
2023-10-16 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2023-11-02 00:00:00
Firefox regressions
2023-11-14 00:00:00
Firefox vulnerabilities
2023-10-30 00:00:00
amazon
amazon
Important: thunderbird
2023-11-09 19:19:00
Medium: thunderbird
2023-10-12 15:09:00
slackware
slackware
[slackware-security] mozilla-firefox
2023-10-24 22:27:04
[slackware-security] mozilla-thunderbird
2023-10-26 20:00:50
kaspersky
kaspersky
KLA61569 Multiple vulnerabilities in Mozilla Firefox ESR
2023-10-24 00:00:00
KLA61570 Multiple vulnerabilities in Mozilla Thunderbird
2023-10-24 00:00:00
KLA61568 Multiple vulnerabilities in Mozilla Firefox
2023-10-24 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 115.4.1 — Mozilla
2023-10-24 00:00:00
Security Vulnerabilities fixed in Firefox ESR 115.4 — Mozilla
2023-10-24 00:00:00
Security Vulnerabilities fixed in Firefox 119 — Mozilla
2023-10-24 00:00:00
prion
prion
Design/Logic Flaw
2023-09-30 20:15:00
Code injection
2023-10-25 18:17:00
Authorization
2023-10-25 18:17:00
nvd
nvd
CVE-2023-44488
2023-09-30 20:15:10
CVE-2023-5724
2023-10-25 18:17:44
CVE-2023-5725
2023-10-25 18:17:44
ubuntucve
ubuntucve
CVE-2023-44488
2023-10-02 00:00:00
CVE-2023-5724
2023-10-25 00:00:00
CVE-2023-5721
2023-10-25 00:00:00
cve
cve
CVE-2023-44488
2023-09-30 20:15:10
CVE-2023-5724
2023-10-25 18:17:44
CVE-2023-5725
2023-10-25 18:17:44
redhatcve
redhatcve
CVE-2023-44488
2023-10-02 20:25:34
CVE-2023-5725
2023-10-24 18:28:30
CVE-2023-5724
2023-10-24 18:28:26
cvelist
cvelist
CVE-2023-44488
2023-09-30 00:00:00
CVE-2023-5724
2023-10-24 12:47:10
CVE-2023-5725
2023-10-24 12:47:11
alpinelinux
alpinelinux
CVE-2023-5724
2023-10-25 18:17:44
CVE-2023-5725
2023-10-25 18:17:44
CVE-2023-44488
2023-09-30 20:15:10
debiancve
debiancve
CVE-2023-5724
2023-10-25 18:17:44
CVE-2023-44488
2023-09-30 20:15:10
CVE-2023-5725
2023-10-25 18:17:44
vulnrichment
vulnrichment
CVE-2023-44488
2023-09-30 00:00:00
CVE-2023-5724
2023-10-24 12:47:10
CVE-2023-5721
2023-10-24 12:47:08
veracode
veracode
Open Redirect
2023-10-27 21:05:12
Buffer Overflow
2023-10-10 06:26:44
Denial Of Service (DoS)
2023-10-27 21:05:30
githubexploit
githubexploit
Exploit for Improper Handling of Exceptional Conditions in Webmproject Libvpx
2024-11-11 10:07:11
cbl_mariner
cbl_mariner
CVE-2023-44488 affecting package libvpx for versions less than 1.13.1-1
2023-11-08 04:19:08

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.003

Percentile

69.1%

JSON
Related for RHSA-2023:6187
redhat14osv31rocky1nessus61almalinux4oraclelinux6debian5mageia3openvas23redos2ubuntu3amazon2slackware2kaspersky3mozilla3prion5nvd3ubuntucve3cve4redhatcve4cvelist3alpinelinux3debiancve3vulnrichment3veracode3githubexploit1cbl_mariner1