[MFSA-2023-44] Security Vulnerability fixed in Firefox 118.0.1, Firefox ESR 115.3.1, Firefox for Android 118.1.0, Firefox Focus for Android 118.1.0, and Thunderbird 115.3.1.
Severity
Critical
Affected Packages
5
Fixed Packages
5
CVEs
1
- CVE-2023-5217: Heap buffer overflow in libvpx (critical) Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process. We are aware of this issue being exploited in other products in the wild.
| Package | Affected Version |
|---|---|
 pkg:mozilla/Thunderbird
|
< 115.3.1 |
|
pkg:mozilla/Firefox?os=android
|
< 118.1.0 |
|
pkg:mozilla/Firefox%20Focus?os=android
|
< 118.1.0 |
|
pkg:mozilla/Firefox%20ESR
|
< 115.3.1 |
|
pkg:mozilla/Firefox
|
< 118.0.1 |
| Package | Fixed Version |
|---|---|
|
pkg:mozilla/Thunderbird
|
= 115.3.1 |
|
pkg:mozilla/Firefox?os=android
|
= 118.1.0 |
|
pkg:mozilla/Firefox%20Focus?os=android
|
= 118.1.0 |
|
pkg:mozilla/Firefox%20ESR
|
= 115.3.1 |
|
pkg:mozilla/Firefox
|
= 118.0.1 |
- ID
- MFSA-2023-44
- Severity
- critical
- URL
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-44
- Published
-
2023-09-28T00:00:00
(11 months ago) - Modified
-
2023-09-28T00:00:00
(11 months ago) - Other Advisories
-
-
ALPINE:CVE-2023-5217
-
ALSA-2023:5434
-
ALSA-2023:5435
-
ALSA-2023:5537
-
ALSA-2023:5539
-
CISA-2023:1002
-
DSA-5508-1
-
DSA-5509-1
-
DSA-5510-1
-
DSA-5513-1
-
ELSA-2023-5428
-
ELSA-2023-5433
-
ELSA-2023-5434
-
ELSA-2023-5435
-
ELSA-2023-5475
-
ELSA-2023-5477
-
ELSA-2023-5537
-
ELSA-2023-5539
-
FEDORA-2023-0cd03c3746
-
FEDORA-2023-10ff82e497
-
FEDORA-2023-bbb8d72c6f
-
FEDORA-2023-c890266d3f
-
FEDORA-2023-c896cf87db
-
FEDORA-2023-d66a01ad4f
-
FEDORA-2023-f696934fbf
-
FREEBSD:2BCD6BA4-D8E2-42E5-9033-B50B722821FB
-
FREEBSD:6D9C6AAE-5EB1-11EE-8290-A8A1599412C6
-
GLSA-202310-04
-
GLSA-202401-34
-
MS:CVE-2023-5217
-
NPM:GHSA-QQVQ-6XGJ-JW8G
-
openSUSE-SU-2023:0277-1
-
openSUSE-SU-2023:0297-1
-
openSUSE-SU-2023:0298-1
-
openSUSE-SU-2023:0365-1
-
openSUSE-SU-2023:0366-1
-
RHSA-2023:5428
-
RHSA-2023:5433
-
RHSA-2023:5434
-
RHSA-2023:5435
-
RHSA-2023:5475
-
RHSA-2023:5477
-
RHSA-2023:5537
-
RHSA-2023:5539
-
RLSA-2023:5428
-
RLSA-2023:5435
-
SSA:2023-271-01
-
SSA:2023-273-01
-
SSA:2023-273-02
-
SUSE-SU-2023:3940-1
-
SUSE-SU-2023:3941-1
-
SUSE-SU-2023:3946-1
-
SUSE-SU-2023:3948-1
-
SUSE-SU-2023:3949-1
-
SUSE-SU-2023:3950-1
-
SUSE-SU-2023:4016-1
-
USN-6403-1
-
USN-6403-2
-
USN-6403-3
-
USN-6404-1
-
USN-6405-1
-
| Source | # ID | Name | URL |
|---|---|---|---|
|
|
|||
| Bugzilla | 1855550 |
|
|
|
|
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:mozilla/Thunderbird |
Thunderbird
|
< 115.3.1 | ||||
| Fixed | pkg:mozilla/Thunderbird |
Thunderbird
|
= 115.3.1 | ||||
| Affected | pkg:mozilla/Firefox?os=android |
Firefox
|
< 118.1.0 | ||||
| Fixed | pkg:mozilla/Firefox?os=android |
Firefox
|
= 118.1.0 | ||||
| Affected | pkg:mozilla/Firefox%20Focus?os=android |
Firefox Focus
|
< 118.1.0 | ||||
| Fixed | pkg:mozilla/Firefox%20Focus?os=android |
Firefox Focus
|
= 118.1.0 | ||||
| Affected | pkg:mozilla/Firefox%20ESR |
Firefox ESR
|
< 115.3.1 | ||||
| Fixed | pkg:mozilla/Firefox%20ESR |
Firefox ESR
|
= 115.3.1 | ||||
| Affected | pkg:mozilla/Firefox |
Firefox
|
< 118.0.1 | ||||
| Fixed | pkg:mozilla/Firefox |
Firefox
|
= 118.0.1 |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |