Описание
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| firefox | fixed | 110.0-1 | package | |
| nss | fixed | 2:3.87.1-1 | package | |
| firefox-esr | fixed | 102.8.0esr-1 | package | |
| thunderbird | fixed | 1:102.8.0-1 | package |
Примечания
https://www.mozilla.org/en-US/security/advisories/mfsa2023-05/#CVE-2023-0767
https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-0767
https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0767
https://hg.mozilla.org/projects/nss/rev/684586ec163ad4fbbf15ea2cd1ee5c2da43036ad
EPSS
Связанные уязвимости
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
EPSS