Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:4670
HistoryJul 22, 2024 - 12:59 a.m.

(RHSA-2024:4670) Important: thunderbird security update

2024-07-2200:59:19
access.redhat.com
6
mozilla thunderbird
standalone
mail
security update
cve-2024-6604
cve-2024-6601
cve-2024-6602
cve-2024-6603
cvss score
references section
memory safety
race condition
memory corruption

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8

Confidence

High

JSON

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13 (CVE-2024-6604)

  • Mozilla: Race condition in permission assignment (CVE-2024-6601)

  • Mozilla: Memory corruption in NSS (CVE-2024-6602)

  • Mozilla: Memory corruption in thread creation (CVE-2024-6603)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9aarch64thunderbird< 115.13.0-3.el9_2thunderbird-115.13.0-3.el9_2.aarch64.rpm
RedHat9ppc64lethunderbird-debugsource< 115.13.0-3.el9_2thunderbird-debugsource-115.13.0-3.el9_2.ppc64le.rpm
RedHat9s390xthunderbird-debuginfo< 115.13.0-3.el9_2thunderbird-debuginfo-115.13.0-3.el9_2.s390x.rpm
RedHat9ppc64lethunderbird-debuginfo< 115.13.0-3.el9_2thunderbird-debuginfo-115.13.0-3.el9_2.ppc64le.rpm
RedHat9s390xthunderbird-debugsource< 115.13.0-3.el9_2thunderbird-debugsource-115.13.0-3.el9_2.s390x.rpm
RedHat9x86_64thunderbird< 115.13.0-3.el9_2thunderbird-115.13.0-3.el9_2.x86_64.rpm
RedHat9aarch64thunderbird-debugsource< 115.13.0-3.el9_2thunderbird-debugsource-115.13.0-3.el9_2.aarch64.rpm
RedHat9x86_64thunderbird-debuginfo< 115.13.0-3.el9_2thunderbird-debuginfo-115.13.0-3.el9_2.x86_64.rpm
RedHat9s390xthunderbird< 115.13.0-3.el9_2thunderbird-115.13.0-3.el9_2.s390x.rpm
RedHat9aarch64thunderbird-debuginfo< 115.13.0-3.el9_2thunderbird-debuginfo-115.13.0-3.el9_2.aarch64.rpm
Rows per page:
1-10 of 121

Related

nessus 50
redhat 16
openvas 19
osv 25
redos 2
rocky 3
slackware 2
oraclelinux 4
almalinux 4
ubuntu 2
mageia 2
kaspersky 4
mozilla 4
redhatcve 4
cvelist 4
nvd 4
alpinelinux 4
wolfi 4
debiancve 4
ubuntucve 4
vulnrichment 4
cve 4
nessus
nessus
RHEL 8 : thunderbird (RHSA-2024:4671)
2024-07-22 00:00:00
Debian dsa-5727 : firefox-esr - security update
2024-07-11 00:00:00
RHEL 8 : thunderbird (RHSA-2024:4717)
2024-07-23 00:00:00
redhat
redhat
(RHSA-2024:4718) Important: thunderbird security update
2024-07-23 08:05:48
(RHSA-2024:4671) Important: thunderbird security update
2024-07-22 00:59:21
(RHSA-2024:4625) Important: thunderbird security update
2024-07-18 13:16:50
openvas
openvas
Mozilla Firefox ESR Security Update (mfsa_2024-30) - Windows
2024-07-11 00:00:00
Mozilla Thunderbird Security Update (mfsa_2024-31) - Windows
2024-07-19 00:00:00
Ubuntu: Security Advisory (USN-6903-1)
2024-07-22 00:00:00
osv
osv
firefox-esr - security update
2024-07-10 00:00:00
thunderbird - security update
2024-07-18 00:00:00
Important: thunderbird security update
2024-07-18 00:00:00
redos
redos
ROS-20240902-11
2024-09-02 00:00:00
ROS-20240920-11
2024-09-20 00:00:00
rocky
rocky
firefox security update
2024-07-15 12:18:45
thunderbird security update
2024-07-26 12:33:59
thunderbird security update
2024-07-26 12:33:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2024-07-23 19:09:25
[slackware-security] mozilla-firefox
2024-07-10 17:52:20
oraclelinux
oraclelinux
thunderbird security update
2024-07-18 00:00:00
firefox security update
2024-07-11 00:00:00
firefox security update
2024-07-11 00:00:00
almalinux
almalinux
Important: thunderbird security update
2024-07-18 00:00:00
Important: thunderbird security update
2024-07-18 00:00:00
Important: firefox security update
2024-07-11 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2024-07-22 00:00:00
Firefox vulnerabilities
2024-07-10 00:00:00
mageia
mageia
Updated nss & firefox packages fix security vulnerabilities
2024-07-16 06:21:38
Updated thunderbird packages fix security vulnerabilities
2024-07-21 05:28:06
kaspersky
kaspersky
KLA70479 Multiple vulnerabilities in Mozilla Thunderbird
2024-07-15 00:00:00
KLA70405 Multiple vulnerabilities in Mozilla Firefox ESR
2024-07-09 00:00:00
KLA70478 Multiple vulnerabilities in Mozilla Thunderbird
2024-07-11 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 115.13 — Mozilla
2024-07-09 00:00:00
Security Vulnerabilities fixed in Thunderbird 115.13 — Mozilla
2024-07-15 00:00:00
Security Vulnerabilities fixed in Thunderbird 128 — Mozilla
2024-07-11 00:00:00
redhatcve
redhatcve
CVE-2024-6602
2024-07-09 21:50:12
CVE-2024-6604
2024-07-09 21:50:21
CVE-2024-6603
2024-07-15 14:37:43
cvelist
cvelist
CVE-2024-6602
2024-07-09 14:25:57
CVE-2024-6604
2024-07-09 14:25:57
CVE-2024-6603
2024-07-09 14:25:57
nvd
nvd
CVE-2024-6602
2024-07-09 15:15:12
CVE-2024-6604
2024-07-09 15:15:12
CVE-2024-6603
2024-07-09 15:15:12
alpinelinux
alpinelinux
CVE-2024-6602
2024-07-09 15:15:12
CVE-2024-6603
2024-07-09 15:15:12
CVE-2024-6604
2024-07-09 15:15:12
wolfi
wolfi
CVE-2024-6602 vulnerabilities
2024-09-19 09:11:50
CVE-2024-6604 vulnerabilities
2024-09-19 09:11:50
CVE-2024-6603 vulnerabilities
2024-09-19 09:11:50
debiancve
debiancve
CVE-2024-6602
2024-07-09 15:15:12
CVE-2024-6604
2024-07-09 15:15:12
CVE-2024-6603
2024-07-09 15:15:12
ubuntucve
ubuntucve
CVE-2024-6602
2024-07-10 00:00:00
CVE-2024-6604
2024-07-10 00:00:00
CVE-2024-6603
2024-07-10 00:00:00
vulnrichment
vulnrichment
CVE-2024-6602
2024-07-09 14:25:57
CVE-2024-6603
2024-07-09 14:25:57
CVE-2024-6604
2024-07-09 14:25:57
cve
cve
CVE-2024-6602
2024-07-09 15:15:12
CVE-2024-6604
2024-07-09 15:15:12
CVE-2024-6603
2024-07-09 15:15:12

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8

Confidence

High

JSON
Related for RHSA-2024:4670
nessus50redhat16openvas19osv25redos2rocky3slackware2oraclelinux4almalinux4ubuntu2mageia2kaspersky4mozilla4redhatcve4cvelist4nvd4alpinelinux4wolfi4debiancve4ubuntucve4vulnrichment4cve4