Thunderbird vulnerabilities

2024-07-2200:00:00

ubuntu.com

thunderbird

ubuntu

security issues

denial of service

sensitive information

security restrictions

cross-site tracing

arbitrary code

cve-2024-6600

cve-2024-6601

cve-2024-6602

cve-2024-6603

cve-2024-6604

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

JSON

Releases

Ubuntu 22.04 LTS
Ubuntu 20.04 LTS

Packages

thunderbird - Mozilla Open Source mail and newsgroup client

Details

Multiple security issues were discovered in Thunderbird. If a user were
tricked into opening a specially crafted website in a browsing context, an
attacker could potentially exploit these to cause a denial of service,
obtain sensitive information, bypass security restrictions, cross-site
tracing, or execute arbitrary code. (CVE-2024-6600, CVE-2024-6601,
CVE-2024-6604)

Ronald Crane discovered that Thunderbird did not properly manage certain
memory operations in the NSS. An attacker could potentially exploit this
issue to cause a denial of service. (CVE-2024-6602)

Irvan Kurniawan discovered that Thunderbird did not properly manage memory
during thread creation. An attacker could potentially exploit this
issue to cause a denial of service, or execute arbitrary code.
(CVE-2024-6603)

OSVersionArchitecturePackageVersionFilename
Ubuntu22.04noarchthunderbird< 1:115.13.0+build5-0ubuntu0.22.04.1UNKNOWN
Ubuntu22.04noarchthunderbird-dbg< 1:115.13.0+build5-0ubuntu0.22.04.1UNKNOWN
Ubuntu22.04noarchthunderbird-dev< 1:115.13.0+build5-0ubuntu0.22.04.1UNKNOWN
Ubuntu22.04noarchthunderbird-gnome-support< 1:115.13.0+build5-0ubuntu0.22.04.1UNKNOWN
Ubuntu22.04noarchthunderbird-gnome-support-dbg< 1:115.13.0+build5-0ubuntu0.22.04.1UNKNOWN
Ubuntu22.04noarchthunderbird-locale-af< 1:115.13.0+build5-0ubuntu0.22.04.1UNKNOWN
Ubuntu22.04noarchthunderbird-locale-ar< 1:115.13.0+build5-0ubuntu0.22.04.1UNKNOWN
Ubuntu22.04noarchthunderbird-locale-ast< 1:115.13.0+build5-0ubuntu0.22.04.1UNKNOWN
Ubuntu22.04noarchthunderbird-locale-be< 1:115.13.0+build5-0ubuntu0.22.04.1UNKNOWN
Ubuntu22.04noarchthunderbird-locale-bg< 1:115.13.0+build5-0ubuntu0.22.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	22.04	noarch	thunderbird	< 1:115.13.0+build5-0ubuntu0.22.04.1	UNKNOWN
Ubuntu	22.04	noarch	thunderbird-dbg	< 1:115.13.0+build5-0ubuntu0.22.04.1	UNKNOWN
Ubuntu	22.04	noarch	thunderbird-dev	< 1:115.13.0+build5-0ubuntu0.22.04.1	UNKNOWN
Ubuntu	22.04	noarch	thunderbird-gnome-support	< 1:115.13.0+build5-0ubuntu0.22.04.1	UNKNOWN
Ubuntu	22.04	noarch	thunderbird-gnome-support-dbg	< 1:115.13.0+build5-0ubuntu0.22.04.1	UNKNOWN
Ubuntu	22.04	noarch	thunderbird-locale-af	< 1:115.13.0+build5-0ubuntu0.22.04.1	UNKNOWN
Ubuntu	22.04	noarch	thunderbird-locale-ar	< 1:115.13.0+build5-0ubuntu0.22.04.1	UNKNOWN
Ubuntu	22.04	noarch	thunderbird-locale-ast	< 1:115.13.0+build5-0ubuntu0.22.04.1	UNKNOWN
Ubuntu	22.04	noarch	thunderbird-locale-be	< 1:115.13.0+build5-0ubuntu0.22.04.1	UNKNOWN
Ubuntu	22.04	noarch	thunderbird-locale-bg	< 1:115.13.0+build5-0ubuntu0.22.04.1	UNKNOWN