Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:2173-1

Опубликовано: 11 мая 2023
Источник: suse-cvrf

Описание

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Extended Support Release 102.11.0 ESR (bsc#1211175):

  • CVE-2023-32205: Browser prompts could have been obscured by popups
  • CVE-2023-32206: Crash in RLBox Expat driver
  • CVE-2023-32207: Potential permissions request bypass via clickjacking
  • CVE-2023-32211: Content process crash due to invalid wasm code
  • CVE-2023-32212: Potential spoof due to obscured address bar
  • CVE-2023-32213: Potential memory corruption in FileReader::DoReadData()
  • CVE-2023-32214: Potential DoS via exposed protocol handlers
  • CVE-2023-32215: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11

Список пакетов

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP4-SAP-Azure-LI-BYOS
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP5-SAP-Azure-LI-BYOS
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP6-SAP-Azure-LI-BYOS
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS
MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
MozillaFirefox-102.11.0-150200.152.87.1
SUSE Enterprise Storage 7
MozillaFirefox-102.11.0-150200.152.87.1
MozillaFirefox-devel-102.11.0-150200.152.87.1
MozillaFirefox-translations-common-102.11.0-150200.152.87.1
MozillaFirefox-translations-other-102.11.0-150200.152.87.1
SUSE Enterprise Storage 7.1
MozillaFirefox-102.11.0-150200.152.87.1
MozillaFirefox-devel-102.11.0-150200.152.87.1
MozillaFirefox-translations-common-102.11.0-150200.152.87.1
MozillaFirefox-translations-other-102.11.0-150200.152.87.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
MozillaFirefox-102.11.0-150200.152.87.1
MozillaFirefox-devel-102.11.0-150200.152.87.1
MozillaFirefox-translations-common-102.11.0-150200.152.87.1
MozillaFirefox-translations-other-102.11.0-150200.152.87.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
MozillaFirefox-102.11.0-150200.152.87.1
MozillaFirefox-devel-102.11.0-150200.152.87.1
MozillaFirefox-translations-common-102.11.0-150200.152.87.1
MozillaFirefox-translations-other-102.11.0-150200.152.87.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
MozillaFirefox-102.11.0-150200.152.87.1
MozillaFirefox-devel-102.11.0-150200.152.87.1
MozillaFirefox-translations-common-102.11.0-150200.152.87.1
MozillaFirefox-translations-other-102.11.0-150200.152.87.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP4
MozillaFirefox-102.11.0-150200.152.87.1
MozillaFirefox-devel-102.11.0-150200.152.87.1
MozillaFirefox-translations-common-102.11.0-150200.152.87.1
MozillaFirefox-translations-other-102.11.0-150200.152.87.1
SUSE Linux Enterprise Real Time 15 SP3
MozillaFirefox-102.11.0-150200.152.87.1
MozillaFirefox-devel-102.11.0-150200.152.87.1
MozillaFirefox-translations-common-102.11.0-150200.152.87.1
MozillaFirefox-translations-other-102.11.0-150200.152.87.1
SUSE Linux Enterprise Server 15 SP2-LTSS
MozillaFirefox-102.11.0-150200.152.87.1
MozillaFirefox-devel-102.11.0-150200.152.87.1
MozillaFirefox-translations-common-102.11.0-150200.152.87.1
MozillaFirefox-translations-other-102.11.0-150200.152.87.1
SUSE Linux Enterprise Server 15 SP3-LTSS
MozillaFirefox-102.11.0-150200.152.87.1
MozillaFirefox-devel-102.11.0-150200.152.87.1
MozillaFirefox-translations-common-102.11.0-150200.152.87.1
MozillaFirefox-translations-other-102.11.0-150200.152.87.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
MozillaFirefox-102.11.0-150200.152.87.1
MozillaFirefox-devel-102.11.0-150200.152.87.1
MozillaFirefox-translations-common-102.11.0-150200.152.87.1
MozillaFirefox-translations-other-102.11.0-150200.152.87.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
MozillaFirefox-102.11.0-150200.152.87.1
MozillaFirefox-devel-102.11.0-150200.152.87.1
MozillaFirefox-translations-common-102.11.0-150200.152.87.1
MozillaFirefox-translations-other-102.11.0-150200.152.87.1
openSUSE Leap 15.4
MozillaFirefox-102.11.0-150200.152.87.1
MozillaFirefox-branding-upstream-102.11.0-150200.152.87.1
MozillaFirefox-devel-102.11.0-150200.152.87.1
MozillaFirefox-translations-common-102.11.0-150200.152.87.1
MozillaFirefox-translations-other-102.11.0-150200.152.87.1

Ссылки

Описание

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Ссылки

Описание

An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Ссылки

Описание

A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Ссылки

Описание

A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Ссылки

Описание

An attacker could have positioned a <code>datalist</code> element to obscure the address bar. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Ссылки

Описание

When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Ссылки

Описание

Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Ссылки

Описание

Memory safety bugs present in Firefox 112 and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:MozillaFirefox-102.11.0-150200.152.87.1
Ссылки
Уязвимость SUSE-SU-2023:2173-1