Mozilla Firefox ESR < 102.2

The version of Firefox ESR installed on the remote Windows host is prior to 102.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-34 advisory. - Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefo...

GSD-2022-1004912 perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()

perf/core: Fix data race between perfeventsetoutput and perfmmapclose This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.325 by commit...

GSD-2022-1004910 ip: Fix a data-race around sysctl_fwmark_reflect.

ip: Fix a data-race around sysctlfwmarkreflect. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.325 by commit...

GSD-2022-1004909 tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.

tcp/dccp: Fix a data-race around sysctltcpfwmarkaccept. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.325 by commit...

GSD-2022-1004908 tcp: Fix a data-race around sysctl_tcp_probe_threshold.

tcp: Fix a data-race around sysctltcpprobethreshold. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.325 by commit...

GSD-2022-1004906 tcp: Fix a data-race around sysctl_tcp_notsent_lowat.

tcp: Fix a data-race around sysctltcpnotsentlowat. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.325 by commit...

GSD-2022-1004857 perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()

perf/core: Fix data race between perfeventsetoutput and perfmmapclose This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.290 by commit...

GSD-2022-1004855 ip: Fix a data-race around sysctl_fwmark_reflect.

ip: Fix a data-race around sysctlfwmarkreflect. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.290 by commit...

GSD-2022-1004854 tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.

tcp/dccp: Fix a data-race around sysctltcpfwmarkaccept. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.290 by commit...

GSD-2022-1004853 tcp: Fix a data-race around sysctl_tcp_probe_threshold.

tcp: Fix a data-race around sysctltcpprobethreshold. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.290 by commit...

GSD-2022-1004785 perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()

perf/core: Fix data race between perfeventsetoutput and perfmmapclose This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004783 ip: Fix a data-race around sysctl_fwmark_reflect.

ip: Fix a data-race around sysctlfwmarkreflect. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004782 tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.

tcp/dccp: Fix a data-race around sysctltcpfwmarkaccept. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004780 tcp: Fix a data-race around sysctl_tcp_probe_threshold.

tcp: Fix a data-race around sysctltcpprobethreshold. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004779 tcp: Fix a data-race around sysctl_tcp_probe_interval.

tcp: Fix a data-race around sysctltcpprobeinterval. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004776 tcp: Fix a data-race around sysctl_tcp_notsent_lowat.

tcp: Fix a data-race around sysctltcpnotsentlowat. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004773 tcp: Fix a data-race around sysctl_tcp_early_retrans.

tcp: Fix a data-race around sysctltcpearlyretrans. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004771 tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.

tcp: Fix a data-race around sysctltcpthinlineartimeouts. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

GSD-2022-1004699 ipv4: Fix a data-race around sysctl_fib_sync_mem.

ipv4: Fix a data-race around sysctlfibsyncmem. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit...

GSD-2022-1004698 raw: Fix a data-race around sysctl_raw_l3mdev_accept.

raw: Fix a data-race around sysctlrawl3mdevaccept. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit...