Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-29945

Опубликовано: 24 июн. 2021
Источник: debian
EPSS Низкий

Описание

The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. *Note: This issue only affected x86-32 platforms. Other platforms are unaffected.*. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed88.0-1package
firefox-esrfixed78.10.0esr-1package
thunderbirdfixed1:78.10.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-14/#CVE-2021-29945

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-15/#CVE-2021-29945

  • https://www.mozilla.org/en-US/security/advisories/mfsa2021-16/#CVE-2021-29945

EPSS

Процентиль: 61%
0.00411
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 4 лет назад

The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. *Note: This issue only affected x86-32 platforms. Other platforms are unaffected.*. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

CVSS3: 6.1
redhat
больше 4 лет назад

The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. *Note: This issue only affected x86-32 platforms. Other platforms are unaffected.*. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

CVSS3: 6.5
nvd
около 4 лет назад

The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. *Note: This issue only affected x86-32 platforms. Other platforms are unaffected.*. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

github
около 3 лет назад

The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. *Note: This issue only affected x86-32 platforms. Other platforms are unaffected.*. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

CVSS3: 3.1
fstec
больше 4 лет назад

Уязвимость компонента JIT WebAssembly почтового клиента Thunderbird, браузеров Firefox и Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 61%
0.00411
Низкий