Lucene search

K
redosRedosROS-20240924-02
HistorySep 24, 2024 - 12:00 a.m.

ROS-20240924-02

2024-09-2400:00:00
redos.red-soft.ru
1
thunderbird
firefox
vulnerability
memory
exploitation
denial of service
remote code execution

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

Vulnerability in Thunderbird email client and Firefox browsers, Firefox ESR is related to writing outside the boundaries of the
buffer in memory. Exploitation of the vulnerability could allow an attacker acting remotely to execute
arbitrary code

Vulnerability in Firefox ESR, Firefox web browsers and Thunderbird email client is related to memory usage after memory is freed.
memory after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely,
cause a denial of service

Vulnerability in Firefox ESR, Firefox and Thunderbird web browsers is related to writing outside of buffer boundaries.
buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to cause a
denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64firefox< 115.12.0-1UNKNOWN

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High