Описание
A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue:
A malicious IMAP server can trigger use-after-free and heap-memory disclosure
by sending a crafted ID response. Heap contents can ultimately be persisted
to prefs.js.
Отчет
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | rhel10/thunderbird-flatpak | Affected | ||
| Red Hat Enterprise Linux 6 | thunderbird | Out of support scope | ||
| Red Hat Enterprise Linux 7 | thunderbird | Out of support scope | ||
| Red Hat Enterprise Linux 10 | thunderbird | Fixed | RHSA-2026:73130 | 29.09.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | thunderbird | Fixed | RHSA-2026:77631 | 08.10.2026 |
| Red Hat Enterprise Linux 8 | thunderbird | Fixed | RHSA-2026:73971 | 30.09.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | thunderbird | Fixed | RHSA-2026:82122 | 13.10.2026 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | thunderbird | Fixed | RHSA-2026:82122 | 13.10.2026 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | thunderbird | Fixed | RHSA-2026:81913 | 13.10.2026 |
| Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | thunderbird | Fixed | RHSA-2026:81913 | 13.10.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
3.4 Low
CVSS3
Связанные уязвимости
A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
A malicious IMAP server can trigger use-after-free and heap-memory dis ...
A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
ALT-PU-2026-14614: package `thunderbird` update to version 155.0-alt1
EPSS
3.4 Low
CVSS3