Описание
A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
A flaw was found in Thunderbird. A remote attacker could exploit this vulnerability by sending a maliciously constructed mail header. This could lead to a one-byte read past the end of a buffer, potentially resulting in information disclosure or other unpredictable behavior.
Отчет
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | rhel10/thunderbird-flatpak | Affected | ||
| Red Hat Enterprise Linux 6 | thunderbird | Out of support scope | ||
| Red Hat Enterprise Linux 7 | thunderbird | Out of support scope | ||
| Red Hat Enterprise Linux 10 | thunderbird | Fixed | RHSA-2026:73130 | 29.09.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | thunderbird | Fixed | RHSA-2026:77631 | 08.10.2026 |
| Red Hat Enterprise Linux 8 | thunderbird | Fixed | RHSA-2026:73971 | 30.09.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | thunderbird | Fixed | RHSA-2026:82122 | 13.10.2026 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | thunderbird | Fixed | RHSA-2026:82122 | 13.10.2026 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | thunderbird | Fixed | RHSA-2026:81913 | 13.10.2026 |
| Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | thunderbird | Fixed | RHSA-2026:81913 | 13.10.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.1 Medium
CVSS3
Связанные уязвимости
A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
A maliciously constructed mail header could lead to a one byte read pa ...
A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
ALT-PU-2026-14614: package `thunderbird` update to version 155.0-alt1
EPSS
6.1 Medium
CVSS3