The vulnerability in the input method editor (IME) editing methods of Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the input method editor IME editing tools in Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after event handling is released. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability in the Resource Timing API interface of Firefox browsers, Firefox ESR, and the Thunderbird email client allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Resource Timing API interface in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to improper neutralization of alternative syntax in XSS attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthoriz...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of after-freeing mechanisms, allows a hacker to trigger a service failure.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to the use of after-release components. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions using a specially created malware script...

SUSE-SU-2021:0080-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.1 ESR Fixed: Critical security issue MFSA 2021-01 bsc1180623 CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk...

SUSE-SU-2021:14595-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.1 ESR Fixed: Critical security issue MFSA 2021-01 bsc1180623 CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk...

An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

...

SUSE-SU-2021:0072-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.6.1 ESR Fixed: Critical security issue MFSA 2021-01 bsc1180623 CVE-2020-16044 Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk...

Vulnerability fixed in Microsoft SQL server

There is a vulnerability in Microsoft SQL Server. A authenticated malicious party can send data over a network to an affected SQL Server when it is configured to running an Extended Event session. SQL Server: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact...

DEBIAN-CVE-2020-35113

Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 84, Thunderbi...

DEBIAN-CVE-2020-26978

Using techniques that built on the slipstream research, a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox 84, Thunderbird 78.6, and Firefox ESR 78.6...

OPENSUSE-SU-2021:0017-1 Security update for privoxy

This update for privoxy fixes the following issues: privoxy was updated to 3.0.29: Fixed memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory. OVE-20201118-0001 Fixed a memory leak in the show-status CGI handler when no action files are...

OPENSUSE-SU-2021:0016-1 Security update for privoxy

This update for privoxy fixes the following issues: privoxy was updated to 3.0.29: Fixed memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory. OVE-20201118-0001 Fixed a memory leak in the show-status CGI handler when no action files are...

The vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client are related to insufficient input validation, allowing attackers to trigger service failures.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

The vulnerability affects the implementation of HTTP/2 technology in browsers like Firefox, Firefox ESR, and the email client Thunderbird. This allows attackers to induce a service failure.

The vulnerability in the implementation of HTTP/2 technology in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.

The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of Firefox, Firefox ESR, and the Thunderbird email client relates to the issue of executing code outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

OPENSUSE-SU-2020:2315-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR bsc1178824 CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code CVE-2020-16012: Variable time processing of cross-origin images during...

[SECURITY] Fedora 33 Update: openjpeg2-2.3.1-10.fc33

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.

The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of Firefox, Firefox ESR, and the Thunderbird email client relates to the use of memory after transaction processing in the editor. This allows an attacker to cause a service failure.

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the use of memory after transaction processing in the editor. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...