CVE-2023-6207

Опубликовано: 21 нояб. 2023

Источник: redhat

CVSS3: 8.8

EPSS Низкий

Описание

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

The Mozilla Foundation Security Advisory describes this flaw as: Ownership mismanagement led to a use-after-free in ReadableByteStreams

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	firefox	Out of support scope
Red Hat Enterprise Linux 6	thunderbird	Out of support scope
Red Hat Enterprise Linux 7	thunderbird	Fixed	RHSA-2023:7505	27.11.2023
Red Hat Enterprise Linux 7	firefox	Fixed	RHSA-2023:7509	27.11.2023
Red Hat Enterprise Linux 8	thunderbird	Fixed	RHSA-2023:7500	27.11.2023
Red Hat Enterprise Linux 8	firefox	Fixed	RHSA-2023:7508	27.11.2023
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions	thunderbird	Fixed	RHSA-2023:7502	27.11.2023
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions	firefox	Fixed	RHSA-2023:7547	28.11.2023
Red Hat Enterprise Linux 8.2 Advanced Update Support	firefox	Fixed	RHSA-2023:7573	29.11.2023
Red Hat Enterprise Linux 8.2 Advanced Update Support	thunderbird	Fixed	RHSA-2023:7574	29.11.2023

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Important

Дефект:

CWE-416

https://bugzilla.redhat.com/show_bug.cgi?id=2250899Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer

EPSS

Процентиль: 63%

0.00464

Низкий

8.8 High

CVSS3

Связанные уязвимости

CVE-2023-6207

CVSS3: 8.8

ubuntu

больше 1 года назад

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

CVE-2023-6207

CVSS3: 8.8

nvd

больше 1 года назад

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

CVE-2023-6207

CVSS3: 8.8

debian

больше 1 года назад

Ownership mismanagement led to a use-after-free in ReadableByteStreams ...

GHSA-qvr4-hgxw-v9xj

CVSS3: 8.8

github

больше 1 года назад

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox < 115.5, and Thunderbird < 115.5.0.

BDU:2023-08332

CVSS3: 8.8

fstec

больше 1 года назад

Уязвимость функции ReadableByteStreams браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 63%

0.00464

Низкий

8.8 High

CVSS3