CVE-2023-0767

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...

SUSE-SU-2023:0443-1 Security update for mozilla-nss

This update for mozilla-nss fixes the following issues: Updated to NSS 3.79.4 bsc1208138: - CVE-2023-0767: Fixed handling of unknown PKCS12 safe bag types...

PT-2023-1699

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 110 Thunderbird versions prior to 102.8 Firefox ESR versions prior to 102.8 Description The issue is related to the mishandling of PKCS 12 Safe Bag attributes, which could allow for arbitrary memory writes. This is du...