Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
almalinuxAlmaLinuxALSA-2024:2883
HistoryMay 16, 2024 - 12:00 a.m.

Important: firefox security update

2024-05-1600:00:00
errata.almalinux.org
14
mozilla
update
cve-2024-4367
pdf.js
indexeddb
clickjacking
cross-origin
use-after-free
memory safety
thunderbird
unix

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

10.3%

JSON

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 115.11.0 ESR.

Security Fix(es):

  • firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367)
  • firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767)
  • firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768)
  • firefox: Cross-origin responses could be distinguished between script and non-script content-types (CVE-2024-4769)
  • firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770)
  • firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 (CVE-2024-4777)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9ppc64lefirefox< 115.11.0-1.el9_4.alma.1firefox-115.11.0-1.el9_4.alma.1.ppc64le.rpm
almalinux9ppc64lefirefox-x11< 115.11.0-1.el9_4.alma.1firefox-x11-115.11.0-1.el9_4.alma.1.ppc64le.rpm
almalinux9x86_64firefox-x11< 115.11.0-1.el9_4.alma.1firefox-x11-115.11.0-1.el9_4.alma.1.x86_64.rpm
almalinux9x86_64firefox< 115.11.0-1.el9_4.alma.1firefox-115.11.0-1.el9_4.alma.1.x86_64.rpm
almalinux9aarch64firefox-x11< 115.11.0-1.el9_4.alma.1firefox-x11-115.11.0-1.el9_4.alma.1.aarch64.rpm
almalinux9aarch64firefox< 115.11.0-1.el9_4.alma.1firefox-115.11.0-1.el9_4.alma.1.aarch64.rpm
almalinux9s390xfirefox< 115.11.0-1.el9_4.alma.1firefox-115.11.0-1.el9_4.alma.1.s390x.rpm
almalinux9s390xfirefox-x11< 115.11.0-1.el9_4.alma.1firefox-x11-115.11.0-1.el9_4.alma.1.s390x.rpm

Related

oraclelinux 6
nessus 53
debian 4
redhat 18
openvas 23
osv 25
almalinux 3
slackware 2
kaspersky 3
rocky 3
amazon 1
mageia 2
mozilla 3
ubuntu 3
debiancve 6
wpvulndb 1
cve 5
ubuntucve 5
redhatcve 4
vulnrichment 6
nvd 6
githubexploit 6
veracode 3
redos 1
cvelist 3
ibm 2
github 2
oraclelinux
oraclelinux
firefox security update
2024-05-16 00:00:00
firefox security update
2024-06-11 00:00:00
thunderbird security update
2024-05-16 00:00:00
nessus
nessus
Amazon Linux 2 : thunderbird (ALAS-2024-2561)
2024-06-12 00:00:00
RHEL 8 : thunderbird (RHSA-2024:3784)
2024-06-10 00:00:00
Mozilla Firefox ESR < 115.11
2024-05-14 00:00:00
debian
debian
[SECURITY] [DSA 5691-1] firefox-esr security update
2024-05-15 17:48:47
[SECURITY] [DSA 5693-1] thunderbird security update
2024-05-17 17:04:52
[SECURITY] [DLA 3817-1] thunderbird security update
2024-05-20 08:15:13
redhat
redhat
(RHSA-2024:2884) Important: firefox security update
2024-05-16 11:24:32
(RHSA-2024:2904) Important: thunderbird security update
2024-05-20 01:02:20
(RHSA-2024:2887) Important: firefox security update
2024-05-16 11:24:50
openvas
openvas
Slackware: Security Advisory (SSA:2024-164-01)
2024-06-13 00:00:00
Mozilla Firefox ESR Security Update (mfsa_2024-22) - Mac OS X
2024-05-17 00:00:00
Mozilla Thunderbird Security Update (mfsa_2024-23) - Windows
2024-05-17 00:00:00
osv
osv
Important: thunderbird security update
2024-05-16 00:00:00
Moderate: firefox security update
2024-06-10 00:00:00
thunderbird vulnerabilities
2024-05-22 05:06:43
almalinux
almalinux
Moderate: thunderbird security update
2024-06-10 00:00:00
Moderate: firefox security update
2024-06-10 00:00:00
Important: thunderbird security update
2024-05-16 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2024-06-12 21:36:48
[slackware-security] mozilla-firefox
2024-05-14 19:27:14
kaspersky
kaspersky
KLA67587 Multiple vulnerabilities in Mozilla Firefox ESR
2024-05-14 00:00:00
KLA67450 Multiple vulnerabilities in Mozilla Thunderbird
2024-05-15 00:00:00
KLA67588 Multiple vulnerabilities in Mozilla Firefox
2024-05-14 00:00:00
rocky
rocky
thunderbird security update
2024-06-14 13:59:30
firefox security update
2024-06-14 13:59:30
thunderbird security update
2024-06-14 14:00:40
amazon
amazon
Important: thunderbird
2024-06-06 20:17:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2024-05-22 02:38:02
Updated nss & firefox packages fix security vulnerabilities
2024-05-22 02:17:20
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 115.11 — Mozilla
2024-05-15 00:00:00
Security Vulnerabilities fixed in Firefox ESR 115.11 — Mozilla
2024-05-14 00:00:00
Security Vulnerabilities fixed in Firefox 126 — Mozilla
2024-05-14 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2024-05-22 00:00:00
Firefox regressions
2024-05-29 00:00:00
Firefox vulnerabilities
2024-05-21 00:00:00
debiancve
debiancve
CVE-2024-4367
2024-05-14 18:15:12
CVE-2024-4768
2024-05-14 18:15:14
CVE-2024-4770
2024-05-14 18:15:14
wpvulndb
wpvulndb
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
2024-06-03 00:00:00
cve
cve
CVE-2024-4367
2024-05-14 18:15:12
CVE-2024-4768
2024-05-14 18:15:14
CVE-2024-4770
2024-05-14 18:15:14
ubuntucve
ubuntucve
CVE-2024-4770
2024-05-14 00:00:00
CVE-2024-4777
2024-05-14 00:00:00
CVE-2024-4767
2024-05-14 00:00:00
redhatcve
redhatcve
CVE-2024-4768
2024-05-14 18:54:57
CVE-2024-4777
2024-05-14 18:55:09
CVE-2024-4367
2024-05-14 18:54:47
vulnrichment
vulnrichment
CVE-2024-4768
2024-05-14 17:21:24
CVE-2024-4367
2024-05-14 17:21:23
CVE-2024-4770
2024-05-14 17:21:24
nvd
nvd
CVE-2024-4777
2024-05-14 18:15:16
CVE-2024-4770
2024-05-14 18:15:14
CVE-2024-4767
2024-05-14 18:15:13
githubexploit
githubexploit
Exploit for CVE-2024-4367
2024-05-20 22:56:10
Exploit for CVE-2024-4367
2024-05-22 18:05:47
Exploit for CVE-2024-4367
2024-06-17 11:39:41
veracode
veracode
Remote Code Execution (RCE)
2024-05-08 04:43:35
Permission Issues
2024-05-20 12:36:39
Information Exposure
2024-05-20 12:38:49
redos
redos
ROS-20240902-09
2024-09-02 00:00:00
cvelist
cvelist
CVE-2024-4770
2024-05-14 17:21:24
CVE-2024-4367
2024-05-14 17:21:23
CVE-2024-4769
2024-05-14 17:21:24
ibm
ibm
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Mozilla Firefox arbitrary code execution vulnerability [CVE-2024-4367]
2024-08-05 21:42:56
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in pdfjs-dist
2024-09-20 21:17:11
github
github
PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF
2024-05-07 10:25:08
Arbitrary JavaScript execution due to using outdated libraries
2024-06-05 14:15:50

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

10.3%

JSON
Related for ALSA-2024:2883
oraclelinux6nessus53debian4redhat18openvas23osv25almalinux3slackware2kaspersky3rocky3amazon1mageia2mozilla3ubuntu3debiancve6wpvulndb1cve5ubuntucve5redhatcve4vulnrichment6nvd6githubexploit6veracode3redos1cvelist3ibm2github2