UBUNTU-CVE-2022-45409

The garbage collector could have been aborted in several states and zones and GCRuntime::finishCollection may not have been called, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox ESR 102.5, Thunderbird 102.5, and Firefox 107...

kernel: netfilter: flowtable: fix stuck flows on cleanup due to pending work

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix stuck flows on cleanup due to pending work To clear the flow table on flow table free, the following sequence normally happens in order: 1 gcstep work is stopped to disable any further stats/del requests...

Security Vulnerabilities fixed in Firefox 107 — Mozilla

Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined with Range requests might have allowed them to determine the presence or length of a media file. Through a series of popup and window.print calls, an...

OESA-2022-2070 kernel security update

Security Fixes: The vulnerability is a use-after-free that happens when an iouring request is being processed on a registered file and the Unix GC runs and frees the iouring fd and all the registered fds. The order at which the Unix GC processes the inflight fds may lead to registered fds be free...

OESA-2022-2069 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: The vulnerability is a use-after-free that happens when an iouring request is being processed on a registered file and the Unix GC runs and frees the iouring fd and all the registered fds. The order at which the Unix GC processes...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists if the Garbage Collector was in a specific state, leading to memory corruption and potentially result in an application crash...

The vulnerability of the Garbage Collector component of the JavaScript script handler in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Garbage Collector component of the JavaScript script handler in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to improper release of memory segments. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service...

CVE-2022-42928

Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have lead to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 106, Firefox ESR 102.4, and Thunderbird 102.4...

UBUNTU-CVE-2022-42928

Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have lead to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 106, Firefox ESR 102.4, and Thunderbird 102.4...

Oracle Linux 7 : firefox (ELSA-2022-7069)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-7069 advisory. - Fix for expat CVE-2022-40674 and non functional webrtc - Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315 - Added fix for...

Mozilla: Memory Corruption in JS Engine

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of certain types of allocations that were missing annotations that, if the Garbage Collector was in a specific state, could lead to memory corruption and a potentially exploitable crash...

Mozilla: Memory Corruption in JS Engine

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of certain types of allocations that were missing annotations that, if the Garbage Collector was in a specific state, could lead to memory corruption and a potentially exploitable crash...

Mozilla: Memory Corruption in JS Engine

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of certain types of allocations that were missing annotations that, if the Garbage Collector was in a specific state, could lead to memory corruption and a potentially exploitable crash...

Mozilla: Memory Corruption in JS Engine

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of certain types of allocations that were missing annotations that, if the Garbage Collector was in a specific state, could lead to memory corruption and a potentially exploitable crash...

Mozilla: Memory Corruption in JS Engine

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of certain types of allocations that were missing annotations that, if the Garbage Collector was in a specific state, could lead to memory corruption and a potentially exploitable crash...

Mozilla: Memory Corruption in JS Engine

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of certain types of allocations that were missing annotations that, if the Garbage Collector was in a specific state, could lead to memory corruption and a potentially exploitable crash...

Mozilla: Memory Corruption in JS Engine

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of certain types of allocations that were missing annotations that, if the Garbage Collector was in a specific state, could lead to memory corruption and a potentially exploitable crash...

Mozilla: Memory Corruption in JS Engine

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of certain types of allocations that were missing annotations that, if the Garbage Collector was in a specific state, could lead to memory corruption and a potentially exploitable crash...

Mozilla: Memory Corruption in JS Engine

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of certain types of allocations that were missing annotations that, if the Garbage Collector was in a specific state, could lead to memory corruption and a potentially exploitable crash...

Mozilla: Memory Corruption in JS Engine

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of certain types of allocations that were missing annotations that, if the Garbage Collector was in a specific state, could lead to memory corruption and a potentially exploitable crash...