Уязвимость функции модульной инверсии набора библиотек NSS (Network Security Services), позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость набора библиотек NSS (Network Security Services), связанная с использованием криптографического алгоритма ECDSA (Elliptic Curve Digital Signature Algorithm), содержащего дефекты, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость браузера Firefox, связана с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

Уязвимость компонента WebGL браузера Firefox, позволяющая нарушителю выполнить произвольный код

Уязвимость реализации функции isExceptionPending() браузера Mozilla Firefox, позволяющая нарушителю выполнить произвольный код

Уязвимость браузера Mozilla Firefox, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

Уязвимость расширения WebRTC браузера Mozilla Firefox, позволяющая нарушителю оказать воздействие на целостность данных

Уязвимость метода браузера Mozilla Firefox, позволяющая нарушителю повысить свои привилегии или вызвать отказ в обслуживании

Уязвимость браузера Mozilla Firefox, связанная с ошибками управления ресурсами, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость браузера Mozilla Firefox, связанная с ошибками представления информации пользовательским интерфейсом, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость браузера Firefox, вызванная выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

Уязвимость реализации механизма HSTS (HTTP Strict Transport Security) браузера Mozilla Firefox, позволяющая нарушителю обойти механизмы защиты

Уязвимость браузера Mozilla Firefox, связанная с ошибками представления информации, позволяющая нарушителю проводить спуфинг-атаки

Уязвимость графической библиотеки Cairo браузера Mozilla Firefox, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании

Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

Уязвимость операции MessageTasks браузера Mozilla Firefox, позволяющая нарушителю выполнить произвольный код в системе.

Уязвимость браузера Mozilla Firefox, связанная с ошибками при обработке HTML-содержимого, позволяющая нарушителю, выполнить произвольный код в системе

Уязвимость почтового клиента Thunderbird, браузера Firefox, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю осуществлять межсайтовые сценарные атаки (XSS)

Уязвимость компонента JIT веб-браузера Firefox, почтового клиента Thunderbird, позволяющая нарушителю получить доступ к конфиденциальным данным

Уязвимость компонента JIT веб-браузера Firefox, почтового клиента Thunderbird, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

Уязвимость панели разрешений веб-браузера Firefox, почтового клиента Thunderbird, связанная с недостатками процедуры аутентификации, позволяющая нарушителю получить доступ к конфиденциальным данным

Уязвимость веб-браузера Firefox, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

Уязвимость браузера Mozilla Firefox, связанная с записью за границами буфера в памяти, позволяющая нарушителю выполнить произвольный код

Уязвимость браузера Mozilla Firefox, связанная с отсутствием проверки корректности принимаемых запросов, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность

Уязвимость браузера Mozilla Firefox, связанная с ошибками авторизации, позволяющая нарушителю обойти существующие ограничения безопасности

Уязвимость браузера Mozilla Firefox для Android, связанная с ошибками управления ресурсом, позволяющая нарушителю вызвать отказ в обслуживании и раскрыть защищаемую информацию

Уязвимость браузера Mozilla Firefox для Windows, связанная с чтением данных за границами буфера в памяти, позволяющая нарушителю раскрыть защищаемую информацию

Уязвимость браузера Mozilla Firefox, связанная с ошибками представления информации пользовательским интерфейсом, позволяющая нарушителю проводить спуфинг-атаки

Уязвимость браузера Mozilla Firefox, связанная с раскрытием информации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Уязвимость браузера Mozilla Firefox, связанная с ошибками управления ресурсом, позволяющая нарушителю вызвать отказ в обслуживании

Уязвимость браузера Mozilla Firefox, связанная с недостатком в механизме подтверждения источника данных, позволяющая нарушителю проводить спуфинг-атаки

Уязвимость браузера Mozilla Firefox, связанная с недостатками контроля доступа, позволяющая нарушителю видоизменять пользовательский интерфейс

Уязвимость веб-браузеров Firefox ESR и Firefox, связанная с недостаточной нейтрализацией специальных элементов в запросе, позволяющая нарушителю получить доступ к конфиденциальным данным

When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

Firefox did not reset the address bar after the beforeunload dialog was shown if the user chose to remain on the page. This could have resulted in an incorrect URL being shown when used in conjunction with other unexpected browser behaviors. This vulnerability affects Firefox < 80.

When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution. Within Firefox as released by Mozilla, this issue is only exploitable with the Mozilla-controlled signing key. This vulnerability affects Firefox < 80.

Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 81.

When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 81.

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82.

When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 82.

When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin. This vulnerability affects Firefox < 82.

Mozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 82.

Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash when handling out-of-memory errors. This vulnerability affects Firefox < 83.

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox < 83.

Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by introducing rate-limiting to these API calls. This vulnerability affects Firefox < 83.

When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability affects Firefox < 83.

Mozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 83.

The lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that they are not attempting to use a dead actor they have a reference to. Such a check was omitted in WebGL, resulting in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox < 84.

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what the user was typing, perhaps by suggesting it. This vulnerability affects Firefox < 84.

Mozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 84.

The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks. This vulnerability affects Firefox < 85.

An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerability affects Firefox < 85.

The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information. This vulnerability affects Firefox < 85.

Incorrect use of the '' method could have led to a user-after-poison and a potentially exploitable crash. This vulnerability affects Firefox < 85.

When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission. This vulnerability affects Firefox < 85.

Mozilla developers reported memory safety bugs present in Firefox 84. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 85.

Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code. This vulnerability affects Firefox < 86.

When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted in more information than intended by the original origin being provided to the destination of the redirect. This vulnerability affects Firefox < 86.

One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://www.phishingtarget.com@evil.com'. To mitigate this type of attack, Firefox will display a warning dialog; however, this warning dialog would not have been displayed if evil.com used a redirect that was cached by the browser. This vulnerability affects Firefox < 86.

The DOMParser API did not properly process '

The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function was invoked we incorrectly called the sizeof function, instead of using the API method that checks for invalid pointers. This vulnerability affects Firefox < 86.

Mozilla developers reported memory safety bugs present in Firefox 85. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 86.

By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 87.

If an attacker is able to alter specific about:config values (for example malware running on the user's computer), the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker (able to make a direct network connection to the victim) to monitor the user's browsing activity and (plaintext) network traffic. This was addressed by providing a visual cue when Devtools has an open network socket. This vulnerability affects Firefox < 87.

A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL. The response to this cross-origin request could have been read by the extension, allowing a same-origin policy bypass by the extension, which should not have cross-origin permissions. This cross-origin request was made without cookies, so the sensitive information disclosed by the violation was limited to local-network resources or resources that perform IP-based authentication. This vulnerability affects Firefox < 87.

Mozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 87.

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox < 88.

Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox < 88.

A race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting with one tab when they believed they were on a separate tab. In conjunction with certain elements (such as <input type="file">) this could have led to an attack where a user was confused about the origin of the webpage and potentially disclosed information they did not intend to. This vulnerability affects Firefox < 88.

A compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations. This vulnerability affects Firefox < 88.

Lack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content Security Policy prevents direct code execution, HTML injection is still possible. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 88.

Mozilla developers and community members reported memory safety bugs present in Firefox 87. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 88.

A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an attacker to leak arbitrary memory addresses and may have also enabled JIT type confusion attacks. (A related vulnerability, Speculative Code Store Bypass (SCSB), did not affect Firefox.). This vulnerability affects Firefox ESR < 78.9 and Firefox < 87.

When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully prevent the website from re-enabling it without an additional prompt. This was only possible if the website kept recording with the microphone until re-enabling the camera. This vulnerability affects Firefox < 89.

Firefox used to cache the last filename used for printing a file. When generating a filename for printing, Firefox usually suggests the web page title. The caching and suggestion techniques combined may have lead to the title of a website visited during private browsing mode being stored on disk. This vulnerability affects Firefox < 89.

When styling and rendering an oversized `` element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox < 89.

Severity: MEDIUM (4.3)Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: MEDIUM (4.3)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1700235
• https://security.gentoo.org/glsa/202107-09
• https://www.mozilla.org/security/advisories/mfsa2021-23/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1700235
• https://security.gentoo.org/glsa/202107-09
• https://www.mozilla.org/security/advisories/mfsa2021-23/

Published: 2021-06-24
Modified: 2024-11-21

CVE-2021-29966

Mozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 89.

Severity: MEDIUM (6.8)Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: HIGH (8.8)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1660307%2C1686154%2C1702948%2C1708124
• https://security.gentoo.org/glsa/202107-09
• https://www.mozilla.org/security/advisories/mfsa2021-23/
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1660307%2C1686154%2C1702948%2C1708124
• https://security.gentoo.org/glsa/202107-09
• https://www.mozilla.org/security/advisories/mfsa2021-23/

Published: 2021-06-24
Modified: 2024-11-21

CVE-2021-29968

When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 89.0.1.

Severity: MEDIUM (5.8)Vector: AV:N/AC:M/Au:N/C:P/I:N/A:P

Severity: HIGH (8.1)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1712047
• https://www.mozilla.org/security/advisories/mfsa2021-27/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1712047
• https://www.mozilla.org/security/advisories/mfsa2021-27/

Published: 2021-08-05
Modified: 2024-11-21

CVE-2021-29972

A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library resolved the issue, and may have remediated other, unknown security vulnerabilities as well. This vulnerability affects Firefox < 90.

Severity: MEDIUM (6.8)Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: HIGH (8.8)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1696816
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-28/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1696816
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-28/

Published: 2021-08-05
Modified: 2024-11-21

CVE-2021-29974

When network partitioning was enabled, e.g. as a result of Enhanced Tracking Protection settings, a TLS error page would allow the user to override an error on a domain which had specified HTTP Strict Transport Security (which implies that the error should not be override-able.) This issue did not affect the network connections, and they were correctly upgraded to HTTPS automatically. This vulnerability affects Firefox < 90.

Severity: LOW (2.6)Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Severity: MEDIUM (4.3)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1704843
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-28/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1704843
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-28/

Published: 2021-08-05
Modified: 2024-11-21

CVE-2021-29975

Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or formatting, could be overlaid on top of another domain (with the new domain correctly shown in the address bar) resulting in possible user confusion. This vulnerability affects Firefox < 90.

Severity: MEDIUM (4.3)Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: MEDIUM (6.5)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1713259
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-28/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1713259
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-28/

Published: 2021-08-05
Modified: 2024-11-21

CVE-2021-29977

Mozilla developers reported memory safety bugs present in Firefox 89. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 90.

Severity: MEDIUM (6.8)Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: HIGH (8.8)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1665836%2C1686138%2C1704316%2C1706314%2C1709931%2C1712084%2C1712357%2C1714066
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-28/
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1665836%2C1686138%2C1704316%2C1706314%2C1709931%2C1712084%2C1712357%2C1714066
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-28/

Published: 2021-08-17
Modified: 2024-11-21

CVE-2021-29981

An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures in JITted code that would lead to a potentially exploitable crash. This vulnerability affects Firefox < 91 and Thunderbird < 91.

Severity: MEDIUM (6.8)Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: HIGH (8.8)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1707774
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-33/
• https://www.mozilla.org/security/advisories/mfsa2021-36/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1707774
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-33/
• https://www.mozilla.org/security/advisories/mfsa2021-36/

Published: 2021-08-17
Modified: 2024-11-21

CVE-2021-29982

Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the potential leak of a single bit of memory. This vulnerability affects Firefox < 91 and Thunderbird < 91.

Severity: MEDIUM (4.3)Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Severity: MEDIUM (6.5)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1715318
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-33/
• https://www.mozilla.org/security/advisories/mfsa2021-36/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1715318
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-33/
• https://www.mozilla.org/security/advisories/mfsa2021-36/

Published: 2021-08-17
Modified: 2024-11-21

CVE-2021-29983

Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause it to exit. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 91.

Severity: MEDIUM (4.3)Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: MEDIUM (6.5)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1719088
• https://www.mozilla.org/security/advisories/mfsa2021-33/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1719088
• https://www.mozilla.org/security/advisories/mfsa2021-33/

Published: 2021-08-17
Modified: 2024-11-21

CVE-2021-29987

After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be displayed in a different position but still record a click in the default location, making it possible to trick a user into accepting a permission they did not want to. *This bug only affects Firefox on Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 91 and Thunderbird < 91.

Severity: MEDIUM (4.3)Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Severity: MEDIUM (6.5)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1716129
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-33/
• https://www.mozilla.org/security/advisories/mfsa2021-36/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1716129
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-33/
• https://www.mozilla.org/security/advisories/mfsa2021-36/

Published: 2021-08-17
Modified: 2024-11-21

CVE-2021-29990

Mozilla developers and community members reported memory safety bugs present in Firefox 90. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 91.

Severity: MEDIUM (6.8)Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: HIGH (8.8)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1544190%2C1716481%2C1717778%2C1719319%2C1722073
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-33/
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1544190%2C1716481%2C1717778%2C1719319%2C1722073
• https://security.gentoo.org/glsa/202202-03
• https://www.mozilla.org/security/advisories/mfsa2021-33/

Published: 2021-11-03
Modified: 2024-11-21

CVE-2021-29991

Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers. This allowed for a header splitting attack against servers using HTTP/3. This vulnerability affects Firefox < 91.0.1 and Thunderbird < 91.0.1.

Severity: MEDIUM (5.8)Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Severity: HIGH (8.1)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1724896
• https://www.mozilla.org/security/advisories/mfsa2021-37/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1724896
• https://www.mozilla.org/security/advisories/mfsa2021-37/

Published: 2021-11-03
Modified: 2024-11-21

CVE-2021-38492

When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. *This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 92, Thunderbird < 91.1, Thunderbird < 78.14, Firefox ESR < 78.14, and Firefox ESR < 91.1.

Severity: MEDIUM (4.3)Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: MEDIUM (6.5)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1721107
• https://security.gentoo.org/glsa/202208-14
• https://www.mozilla.org/security/advisories/mfsa2021-38/
• https://www.mozilla.org/security/advisories/mfsa2021-39/
• https://www.mozilla.org/security/advisories/mfsa2021-40/
• https://www.mozilla.org/security/advisories/mfsa2021-41/
• https://www.mozilla.org/security/advisories/mfsa2021-42/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1721107
• https://security.gentoo.org/glsa/202208-14
• https://www.mozilla.org/security/advisories/mfsa2021-38/
• https://www.mozilla.org/security/advisories/mfsa2021-39/
• https://www.mozilla.org/security/advisories/mfsa2021-40/
• https://www.mozilla.org/security/advisories/mfsa2021-41/
• https://www.mozilla.org/security/advisories/mfsa2021-42/

Published: 2021-11-03
Modified: 2024-11-21

CVE-2021-38493

Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.14, Thunderbird < 78.14, and Firefox < 92.

Severity: MEDIUM (6.8)Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: HIGH (8.8)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1723391%2C1724101%2C1724107
• https://security.gentoo.org/glsa/202202-03
• https://security.gentoo.org/glsa/202208-14
• https://www.mozilla.org/security/advisories/mfsa2021-38/
• https://www.mozilla.org/security/advisories/mfsa2021-39/
• https://www.mozilla.org/security/advisories/mfsa2021-42/
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1723391%2C1724101%2C1724107
• https://security.gentoo.org/glsa/202202-03
• https://security.gentoo.org/glsa/202208-14
• https://www.mozilla.org/security/advisories/mfsa2021-38/
• https://www.mozilla.org/security/advisories/mfsa2021-39/
• https://www.mozilla.org/security/advisories/mfsa2021-42/

Published: 2021-11-03
Modified: 2024-11-21

CVE-2021-38496

During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.15, Thunderbird < 91.2, Firefox ESR < 91.2, Firefox ESR < 78.15, and Firefox < 93.

Severity: MEDIUM (6.8)Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: HIGH (8.8)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1725335
• https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
• https://www.debian.org/security/2022/dsa-5034
• https://www.mozilla.org/security/advisories/mfsa2021-43/
• https://www.mozilla.org/security/advisories/mfsa2021-44/
• https://www.mozilla.org/security/advisories/mfsa2021-45/
• https://www.mozilla.org/security/advisories/mfsa2021-46/
• https://www.mozilla.org/security/advisories/mfsa2021-47/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1725335
• https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
• https://www.debian.org/security/2022/dsa-5034
• https://www.mozilla.org/security/advisories/mfsa2021-43/
• https://www.mozilla.org/security/advisories/mfsa2021-44/
• https://www.mozilla.org/security/advisories/mfsa2021-45/
• https://www.mozilla.org/security/advisories/mfsa2021-46/
• https://www.mozilla.org/security/advisories/mfsa2021-47/

Published: 2021-11-03
Modified: 2024-11-21

CVE-2021-38500

Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.15, Thunderbird < 91.2, Firefox ESR < 91.2, Firefox ESR < 78.15, and Firefox < 93.

Severity: MEDIUM (6.8)Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: HIGH (8.8)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1725854%2C1728321
• https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
• https://www.debian.org/security/2022/dsa-5034
• https://www.mozilla.org/security/advisories/mfsa2021-43/
• https://www.mozilla.org/security/advisories/mfsa2021-44/
• https://www.mozilla.org/security/advisories/mfsa2021-45/
• https://www.mozilla.org/security/advisories/mfsa2021-46/
• https://www.mozilla.org/security/advisories/mfsa2021-47/
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1725854%2C1728321
• https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
• https://www.debian.org/security/2022/dsa-5034
• https://www.mozilla.org/security/advisories/mfsa2021-43/
• https://www.mozilla.org/security/advisories/mfsa2021-44/
• https://www.mozilla.org/security/advisories/mfsa2021-45/
• https://www.mozilla.org/security/advisories/mfsa2021-46/
• https://www.mozilla.org/security/advisories/mfsa2021-47/

ALT-PU-2021-2726-1

Package kernel-image-std-def updated to version 5.10.62-alt1 for branch sisyphus in task 284491.

Closed vulnerabilities

Published: 2021-11-18
Modified: 2024-06-07

BDU:2021-05536

Уязвимость реализации функции check_map_func_compatibility() ядра операционных систем Linux, позволяющая нарушителю повысить свои привилегии

Severity: HIGH (7.8)Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: MEDIUM (6.8)Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C

References:

• CVE-2021-34866
• ZDI-21-1148
• ZDI-CAN-14689

Published: 2022-01-25
Modified: 2024-11-21

CVE-2021-34866

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs, which can result in a type confusion condition. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-14689.

Severity: HIGH (7.2)Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: HIGH (7.8)Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

• https://security.netapp.com/advisory/ntap-20220217-0008/
• https://www.zerodayinitiative.com/advisories/ZDI-21-1148/
• https://security.netapp.com/advisory/ntap-20220217-0008/
• https://www.zerodayinitiative.com/advisories/ZDI-21-1148/

VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla

Version: 2.1.2

Back to top