Lucene search

K
redosRedosROS-20230615-04
HistoryJun 15, 2023 - 12:00 a.m.

ROS-20230615-04

2023-06-1500:00:00
redos.red-soft.ru
16
mozilla firefox
firefox esr
buffer boundary
certificate exception
remote attacker
arbitrary code
tls certificate
user data
memory vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.006

Percentile

77.9%

The vulnerability in Mozilla Firefox and Firefox ESR browsers is related to an operation exceeding buffer boundaries in memory.
memory. Exploitation of the vulnerability could allow an attacker acting remotely to execute
arbitrary code

Vulnerability in Mozilla Firefox browser is related to incorrect processing of user data when displaying certificate exceptions.
certificate exceptions are displayed on the error page for sites with invalid TLS certificates.
Exploitation of the vulnerability could allow an attacker acting remotely to cause a gap between the
loading the error page and the actual screen refresh.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64firefox< 102.12.0-1UNKNOWN

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.006

Percentile

77.9%