Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-5728

Опубликовано: 25 окт. 2023
Источник: debian
EPSS Низкий

Описание

During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed119.0-1package
firefox-esrfixed115.4.0esr-1package
thunderbirdfixed1:115.4.1-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-45/#CVE-2023-5728

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-46/#CVE-2023-5728

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-47/#CVE-2023-5728

EPSS

Процентиль: 56%
0.00338
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 1 года назад

During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

CVSS3: 7.5
redhat
больше 1 года назад

During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

CVSS3: 7.5
nvd
больше 1 года назад

During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

CVSS3: 7.5
github
больше 1 года назад

During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

CVSS3: 6.1
fstec
больше 1 года назад

Уязвимость компонента Garbage Collector («Сборщик мусора») браузеров Firefox и Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 56%
0.00338
Низкий