[ALPINE:CVE-2023-5171] firefox-esr vulnerability

Severity Medium
Affected Packages 15
Fixed Packages 15
CVEs 1

[From CVE-2023-5171] During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.

Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Fixed pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-edge alpine firefox-esr = 115.3.0-r0 alpine-edge x86_64
Affected pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-edge alpine firefox-esr < 115.3.0-r0 alpine-edge x86_64
Fixed pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-3.18 alpine firefox-esr = 115.3.0-r0 alpine-3.18 x86_64
Affected pkg:apk/alpine/firefox-esr?arch=x86_64&distro=alpine-3.18 alpine firefox-esr < 115.3.0-r0 alpine-3.18 x86_64
Fixed pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-edge alpine firefox-esr = 115.3.0-r0 alpine-edge x86
Affected pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-edge alpine firefox-esr < 115.3.0-r0 alpine-edge x86
Fixed pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-3.18 alpine firefox-esr = 115.3.0-r0 alpine-3.18 x86
Affected pkg:apk/alpine/firefox-esr?arch=x86&distro=alpine-3.18 alpine firefox-esr < 115.3.0-r0 alpine-3.18 x86
Fixed pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-edge alpine firefox-esr = 115.3.0-r0 alpine-edge s390x
Affected pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-edge alpine firefox-esr < 115.3.0-r0 alpine-edge s390x
Fixed pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-3.18 alpine firefox-esr = 115.3.0-r0 alpine-3.18 s390x
Affected pkg:apk/alpine/firefox-esr?arch=s390x&distro=alpine-3.18 alpine firefox-esr < 115.3.0-r0 alpine-3.18 s390x
Fixed pkg:apk/alpine/firefox-esr?arch=riscv64&distro=alpine-edge alpine firefox-esr = 115.3.0-r0 alpine-edge riscv64
Affected pkg:apk/alpine/firefox-esr?arch=riscv64&distro=alpine-edge alpine firefox-esr < 115.3.0-r0 alpine-edge riscv64
Fixed pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-edge alpine firefox-esr = 115.3.0-r0 alpine-edge ppc64le
Affected pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-edge alpine firefox-esr < 115.3.0-r0 alpine-edge ppc64le
Fixed pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-3.18 alpine firefox-esr = 115.3.0-r0 alpine-3.18 ppc64le
Affected pkg:apk/alpine/firefox-esr?arch=ppc64le&distro=alpine-3.18 alpine firefox-esr < 115.3.0-r0 alpine-3.18 ppc64le
Fixed pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-edge alpine firefox-esr = 115.3.0-r0 alpine-edge armv7
Affected pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-edge alpine firefox-esr < 115.3.0-r0 alpine-edge armv7
Fixed pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-3.18 alpine firefox-esr = 115.3.0-r0 alpine-3.18 armv7
Affected pkg:apk/alpine/firefox-esr?arch=armv7&distro=alpine-3.18 alpine firefox-esr < 115.3.0-r0 alpine-3.18 armv7
Fixed pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-edge alpine firefox-esr = 115.3.0-r0 alpine-edge armhf
Affected pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-edge alpine firefox-esr < 115.3.0-r0 alpine-edge armhf
Fixed pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-3.18 alpine firefox-esr = 115.3.0-r0 alpine-3.18 armhf
Affected pkg:apk/alpine/firefox-esr?arch=armhf&distro=alpine-3.18 alpine firefox-esr < 115.3.0-r0 alpine-3.18 armhf
Fixed pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-edge alpine firefox-esr = 115.3.0-r0 alpine-edge aarch64
Affected pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-edge alpine firefox-esr < 115.3.0-r0 alpine-edge aarch64
Fixed pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-3.18 alpine firefox-esr = 115.3.0-r0 alpine-3.18 aarch64
Affected pkg:apk/alpine/firefox-esr?arch=aarch64&distro=alpine-3.18 alpine firefox-esr < 115.3.0-r0 alpine-3.18 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...