[ALPINE:CVE-2023-4578] firefox-esr vulnerability

Severity Medium
Affected Packages 15
Fixed Packages 15
CVEs 1

[From CVE-2023-4578] When calling JS::CheckRegExpSyntax a Syntax Error could have been set which would end in calling convertToRuntimeErrorAndClear. A path in the function could attempt to allocate memory when none is available which would have caused a newly created Out of Memory exception to be mishandled as a Syntax Error. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.

Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Fixed pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge x86_64
Affected pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge x86_64
Fixed pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 x86_64
Affected pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 x86_64
Fixed pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge x86
Affected pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge x86
Fixed pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 x86
Affected pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 x86
Fixed pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge s390x
Affected pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge s390x
Fixed pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 s390x
Affected pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 s390x
Fixed pkg:apk/alpine/firefox-esr?arch=riscv64&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge riscv64
Affected pkg:apk/alpine/firefox-esr?arch=riscv64&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge riscv64
Fixed pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge ppc64le
Affected pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge ppc64le
Fixed pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 ppc64le
Affected pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 ppc64le
Fixed pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge armv7
Affected pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge armv7
Fixed pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 armv7
Affected pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 armv7
Fixed pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge armhf
Affected pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge armhf
Fixed pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 armhf
Affected pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 armhf
Fixed pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-edge alpine firefox-esr = 115.2.0-r0 alpine-edge aarch64
Affected pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-edge alpine firefox-esr < 115.2.0-r0 alpine-edge aarch64
Fixed pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-3.18 alpine firefox-esr = 115.2.0-r0 alpine-3.18 aarch64
Affected pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-3.18 alpine firefox-esr < 115.2.0-r0 alpine-3.18 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...