Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2022-0843
HistoryMar 09, 2022 - 12:00 a.m.

CVE-2022-0843

2022-03-0900:00:00
ubuntu.com
ubuntu.com
14
cve-2022-0843
mozilla developers
memory corruption
firefox 97
arbitrary code execution
vulnerability
firefox 98

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

56.1%

JSON

Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup
reported memory safety bugs present in Firefox 97. Some of these bugs
showed evidence of memory corruption and we presume that with enough effort
some of these could have been exploited to run arbitrary code. This
vulnerability affects Firefox < 98.

Notes

Author Note
tyhicks mozjs contains a copy of the SpiderMonkey JavaScript engine
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchfirefox< 98.0+build3-0ubuntu0.18.04.2UNKNOWN
ubuntu20.04noarchfirefox< 98.0+build3-0ubuntu0.20.04.2UNKNOWN
ubuntu21.10noarchfirefox< 98.0+build3-0ubuntu0.21.10.2UNKNOWN
ubuntu22.04noarchfirefox< 1:1snap1-0ubuntu1UNKNOWN
ubuntu22.10noarchfirefox< 1:1snap1-0ubuntu1UNKNOWN
ubuntu23.04noarchfirefox< 1:1snap1-0ubuntu1UNKNOWN
ubuntu23.10noarchfirefox< 1:1snap1-0ubuntu1UNKNOWN
ubuntu24.04noarchfirefox< 1:1snap1-0ubuntu1UNKNOWN
ubuntu18.04noarchmozjs38< anyUNKNOWN
ubuntu18.04noarchmozjs52< anyUNKNOWN
Rows per page:
1-10 of 131

Related

veracode 1
cvelist 1
alpinelinux 1
prion 1
debiancve 1
cve 1
nvd 1
openvas 6
nessus 5
mozilla 1
osv 3
kaspersky 1
ubuntu 3
gentoo 1
veracode
veracode
Denial Of Service (DoS)
2022-03-10 01:31:36
cvelist
cvelist
CVE-2022-0843
2022-12-22 00:00:00
alpinelinux
alpinelinux
CVE-2022-0843
2022-12-22 20:15:12
prion
prion
Memory corruption
2022-12-22 20:15:00
debiancve
debiancve
CVE-2022-0843
2022-12-22 20:15:12
cve
cve
CVE-2022-0843
2022-12-22 20:15:12
nvd
nvd
CVE-2022-0843
2022-12-22 20:15:12
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2022-10) - Linux
2022-04-27 00:00:00
Ubuntu: Security Advisory (USN-5321-2)
2022-03-18 00:00:00
Mozilla Firefox Security Advisory (MFSA2022-10) - Windows
2022-07-07 00:00:00
nessus
nessus
Mozilla Firefox < 98.0
2022-03-08 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5321-1)
2022-03-11 00:00:00
Mozilla Firefox < 98.0
2022-03-08 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 98 — Mozilla
2022-03-08 00:00:00
osv
osv
firefox vulnerabilities
2022-03-17 12:47:30
firefox vulnerabilities
2022-03-10 18:57:29
firefox regressions
2022-03-24 15:26:03
kaspersky
kaspersky
KLA12471 Multiple vulnerabilities in Mozilla Firefox
2022-03-08 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2022-03-10 00:00:00
Firefox regressions
2022-03-24 00:00:00
Firefox vulnerabilities
2022-03-17 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2022-08-10 00:00:00

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

56.1%

JSON
Related for UB:CVE-2022-0843
veracode1cvelist1alpinelinux1prion1debiancve1cve1nvd1openvas6nessus5mozilla1osv3kaspersky1ubuntu3gentoo1