Описание
Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35.
Ссылки
- Issue TrackingPermissions Required
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 140.8.0 (исключая)Версия до 148.0 (исключая)Версия до 140.8.0 (исключая)Версия до 148.0 (исключая)
Одно из
cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*
cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*
EPSS
Процентиль: 29%
0.0036
Низкий
9.8 Critical
CVSS3
8.8 High
CVSS3
Дефекты
CWE-190
CWE-190
Связанные уязвимости
CVSS3: 9.8
ubuntu
5 месяцев назад
Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35.
CVSS3: 6.1
redhat
5 месяцев назад
Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35.
CVSS3: 9.8
debian
5 месяцев назад
Integer overflow in the Libraries component in NSS. This vulnerability ...
EPSS
Процентиль: 29%
0.0036
Низкий
9.8 Critical
CVSS3
8.8 High
CVSS3
Дефекты
CWE-190
CWE-190