CVE-2022-38476

🗓️ 23 Aug 2022 14:41:31Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 104 Views

A data race in PK11_ChangePW function leading to a use-after-free vulnerability in Firefo

Reporter	Title	Published	Views	Family All 172
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 102.2.0-alt1	25 Aug 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.2.0-alt1	24 Aug 202200:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.	31 Jan 202314:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.2ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	15 Nov 202205:24	–	ibm
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2022-1855)	11 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox (ALASFIREFOX-2023-012)	27 Sep 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : thunderbird (ALSA-2022:6164)	31 Aug 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : thunderbird (ALSA-2022:6165)	16 Nov 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : firefox (ALSA-2022:6174)	16 Nov 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : firefox (ALSA-2022:6175)	31 Aug 202200:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-38476
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-34/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

17 Nov 2024 04:32Current

2.7Low risk

Vulners AI Score2.7

CVSS 3.17.5

EPSS0.0082

mozilla foundation security advisory data race pk11_changepw use-after-free firefox