[ALPINE:CVE-2023-4576] firefox-esr vulnerability

Severity High
Affected Packages 15
Fixed Packages 15
CVEs 1

[From CVE-2023-4576] On Windows, an integer overflow could occur in RecordedSourceSurfaceCreation which resulted in a heap buffer overflow potentially leaking sensitive data that could have led to a sandbox escape.
This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.

ID
ALPINE:CVE-2023-4576
Severity
high
Severity from
CVE-2023-4576
URL
https://security.alpinelinux.org/vuln/CVE-2023-4576
Published
2023-09-11T09:15:09
(12 months ago)
Modified
2023-09-11T09:15:09
(12 months ago)
Rights
Alpine Linux Security Team
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Fixed pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge x86_64
Affected pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge x86_64
Fixed pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 x86_64
Affected pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 x86_64
Fixed pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge x86
Affected pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge x86
Fixed pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 x86
Affected pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 x86
Fixed pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge s390x
Affected pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge s390x
Fixed pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 s390x
Affected pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 s390x
Fixed pkg:apk/alpine/firefox-esr?arch=riscv64&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge riscv64
Affected pkg:apk/alpine/firefox-esr?arch=riscv64&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge riscv64
Fixed pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge ppc64le
Affected pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge ppc64le
Fixed pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 ppc64le
Affected pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 ppc64le
Fixed pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge armv7
Affected pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge armv7
Fixed pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 armv7
Affected pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 armv7
Fixed pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge armhf
Affected pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge armhf
Fixed pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 armhf
Affected pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 armhf
Fixed pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge aarch64
Affected pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge aarch64
Fixed pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 aarch64
Affected pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...