Mozilla: Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...

USN-4705-2 sudo vulnerability

USN-4705-1 fixed a vulnerability in Sudo. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Sudo incorrectly handled memory when parsing command lines. A local attacker could possibly use this issue to obtain...

OPENSUSE-SU-2021:0063-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.1 ESR Fixed: Critical security issue MFSA 2021-01 bsc1180623 CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk This update was imported from the SUSE:SLE-15:Update...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2021-03554)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. Mozilla Firefox suffers from a denial of service vulnerability that originates...

OPENSUSE-SU-2021:0056-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.1 ESR Fixed: Critical security issue MFSA 2021-01 bsc1180623 CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk This update was imported from the SUSE:SLE-15:Update...

The vulnerability of Firefox, Firefox ESR, and the Thunderbird email client relates to the issue of operations beyond the buffer boundaries in memory when manipulating the DOM tree. This allows an attacker to execute arbitrary code.

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the issue of operations going beyond the buffer in memory when manipulating the DOM tree. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of after-freeing mechanisms, allows a hacker to trigger a service failure.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to the use of after-release components. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions using a specially created malware script...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client relates to the issue of operations beyond the buffer in memory. This allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to information and compromise its integrity and...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.

The vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of freed resources, allow attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to the use of after-release components. Exploiting these vulnerabilities can allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability...

The vulnerability in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, relates to the execution of operations beyond the allowed data buffer limits. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, is related to the execution of operations beyond the allowed data buffer limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.

The vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of Firefox, Firefox ESR, and the Thunderbird email client relates to the issue of executing code outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability in the Resource Timing API interface of Firefox browsers, Firefox ESR, and the Thunderbird email client allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Resource Timing API interface in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to improper neutralization of alternative syntax in XSS attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthoriz...

The vulnerability of the application programming interface of the IndexedDB client storage in browsers such as Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to induce a service failure.

The vulnerability of the application programming interface of the IndexedDB client storage engine in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause servic...

The vulnerability in the input method editor (IME) editing methods of Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the input method editor IME editing tools in Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after event handling is released. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the WebGL component (a web-based graphics library) in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows attackers to disclose protected information.

The vulnerability of the WebGL component a web-based graphics library in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

SUSE-SU-2021:0080-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.1 ESR Fixed: Critical security issue MFSA 2021-01 bsc1180623 CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk...

SUSE-SU-2021:14595-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.1 ESR Fixed: Critical security issue MFSA 2021-01 bsc1180623 CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk...

SUSE-SU-2021:0072-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.1 ESR Fixed: Critical security issue MFSA 2021-01 bsc1180623 CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk...