Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2023-34416
HistoryJun 07, 2023 - 12:00 a.m.

CVE-2023-34416

2023-06-0700:00:00
ubuntu.com
ubuntu.com
21
firefox
thunderbird
memory safety bugs
arbitrary code execution
vulnerability
memory corruption
mozilla firefox esr
thunderbird version

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.006

Percentile

77.9%

JSON

Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and
Thunderbird 102.12. Some of these bugs showed evidence of memory corruption
and we presume that with enough effort some of these could have been
exploited to run arbitrary code. This vulnerability affects Firefox ESR <
102.12, Firefox < 114, and Thunderbird < 102.12.

Notes

Author Note
tyhicks mozjs contains a copy of the SpiderMonkey JavaScript engine
mdeslaur starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap
OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchfirefox< 114.0+build3-0ubuntu0.20.04.1UNKNOWN
ubuntu22.04noarchmozjs102< 102.12.0-0ubuntu0.22.04.1UNKNOWN
ubuntu22.10noarchmozjs102< 102.12.0-0ubuntu0.22.10.1UNKNOWN
ubuntu23.04noarchmozjs102< 102.12.0-0ubuntu0.23.04.1UNKNOWN
ubuntu18.04noarchmozjs38< anyUNKNOWN
ubuntu18.04noarchmozjs52< anyUNKNOWN
ubuntu20.04noarchmozjs52< anyUNKNOWN
ubuntu20.04noarchmozjs68< anyUNKNOWN
ubuntu22.04noarchmozjs78< anyUNKNOWN
ubuntu22.04noarchmozjs91< anyUNKNOWN
Rows per page:
1-10 of 141

Related

alpinelinux 1
veracode 1
prion 1
debiancve 1
ubuntu 5
openvas 23
cve 1
nvd 1
redhatcve 1
nessus 57
osv 18
cvelist 1
redhat 16
rocky 3
mozilla 3
debian 4
slackware 1
mageia 2
oraclelinux 6
almalinux 4
kaspersky 3
redos 1
gentoo 2
ibm 1
photon 1
alpinelinux
alpinelinux
CVE-2023-34416
2023-06-19 11:15:11
veracode
veracode
Remote Code Execution (RCE)
2023-08-06 17:31:12
prion
prion
Memory corruption
2023-06-19 11:15:00
debiancve
debiancve
CVE-2023-34416
2023-06-19 11:15:11
ubuntu
ubuntu
SpiderMonkey vulnerability
2023-06-08 00:00:00
Firefox regressions
2023-06-13 00:00:00
Firefox regressions
2023-06-21 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6147-1)
2023-06-09 00:00:00
Mageia: Security Advisory (MGASA-2023-0200)
2023-06-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2440-1)
2023-06-08 00:00:00
cve
cve
CVE-2023-34416
2023-06-19 11:15:11
nvd
nvd
CVE-2023-34416
2023-06-19 11:15:11
redhatcve
redhatcve
CVE-2023-34416
2023-06-06 14:55:57
nessus
nessus
Ubuntu 22.04 LTS / 23.04 : SpiderMonkey vulnerability (USN-6147-1)
2023-06-08 00:00:00
RHEL 7 : thunderbird (RHSA-2023:3563)
2023-06-14 00:00:00
RHEL 8 : firefox (RHSA-2023:3597)
2023-06-14 00:00:00
osv
osv
mozjs102 vulnerability
2023-06-08 13:32:03
firefox-esr - security update
2023-06-07 00:00:00
MozillaThunderbird-102.12.0-1.1 on GA media
2024-06-15 00:00:00
cvelist
cvelist
CVE-2023-34416
2023-06-19 10:17:18
redhat
redhat
(RHSA-2023:3579) Important: firefox security update
2023-06-14 07:21:27
(RHSA-2023:3578) Important: firefox security update
2023-06-14 07:18:31
(RHSA-2023:3564) Important: thunderbird security update
2023-06-12 08:41:34
rocky
rocky
thunderbird security update
2023-06-24 18:53:41
firefox security update
2023-08-31 16:54:34
thunderbird security update
2023-06-24 18:52:51
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 102.12 — Mozilla
2023-06-06 00:00:00
Security Vulnerabilities fixed in Thunderbird 102.12 — Mozilla
2023-06-07 00:00:00
Security Vulnerabilities fixed in Firefox 114 — Mozilla
2023-06-06 00:00:00
debian
debian
[SECURITY] [DSA 5423-1] thunderbird security update
2023-06-11 15:25:43
[SECURITY] [DLA 3452-1] thunderbird security update
2023-06-12 09:38:35
[SECURITY] [DLA 3448-1] firefox-esr security update
2023-06-08 07:15:37
slackware
slackware
[slackware-security] mozilla-firefox
2023-06-06 20:30:21
mageia
mageia
Updated firefox/nss packages fix security vulnerability
2023-06-15 10:27:14
Updated thunderbird packages fix security vulnerability
2023-06-15 10:27:14
oraclelinux
oraclelinux
firefox security update
2023-06-17 00:00:00
thunderbird security update
2023-06-12 00:00:00
firefox security update
2023-06-14 00:00:00
almalinux
almalinux
Important: thunderbird security update
2023-06-14 00:00:00
Important: firefox security update
2023-06-14 00:00:00
Important: thunderbird security update
2023-06-14 00:00:00
kaspersky
kaspersky
KLA49379 Multiple vulnerabilities in Mozilla Firefox ESR
2023-06-06 00:00:00
KLA50305 Multiple vulnerabilities in Mozilla Thunderbird
2023-06-07 00:00:00
KLA49378 Multiple vulnerabilities in Mozilla Firefox
2023-06-06 00:00:00
redos
redos
ROS-20230615-04
2023-06-15 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2023-12-20 00:00:00
Mozilla Firefox: Multiple Vulnerabilities
2024-01-07 00:00:00
ibm
ibm
Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.
2023-08-31 11:04:58
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.006

Percentile

77.9%

JSON
Related for UB:CVE-2023-34416
alpinelinux1veracode1prion1debiancve1ubuntu5openvas23cve1nvd1redhatcve1nessus57osv18cvelist1redhat16rocky3mozilla3debian4slackware1mageia2oraclelinux6almalinux4kaspersky3redos1gentoo2ibm1photon1