Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-4046

Опубликовано: 01 авг. 2023
Источник: debian
EPSS Низкий

Описание

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed116.0-1package
firefox-esrfixed115.1.0esr-1package
thunderbirdfixed1:115.1.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-29/#CVE-2023-4046

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-30/#CVE-2023-4046

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-31/#CVE-2023-4046

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-32/#CVE-2023-4046

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-33/#CVE-2023-4046

EPSS

Процентиль: 46%
0.00229
Низкий

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 2 года назад

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

CVSS3: 7.5
redhat
почти 2 года назад

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

CVSS3: 5.3
nvd
почти 2 года назад

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

CVSS3: 5.3
github
почти 2 года назад

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

CVSS3: 6.5
fstec
почти 2 года назад

Уязвимость компонента WASM JIT браузера Firefox, браузеров Firefox Firefox ESR, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 46%
0.00229
Низкий