Alpine Linux Development TeamALPINE:CVE-2022-22753CVE-2022-22753
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
7.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
43.4%
A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | firefox | < 97.0-r0 | UNKNOWN |
| Alpine | edge-community | noarch | thunderbird | < 91.6.0-r0 | UNKNOWN |
| Alpine | 3.16-community | noarch | firefox | < 97.0-r0 | UNKNOWN |
| Alpine | 3.16-community | noarch | thunderbird | < 91.6.0-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | firefox | < 97.0-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | thunderbird | < 91.6.0-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | firefox | < 97.0-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | thunderbird | < 91.6.0-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | firefox | < 97.0-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | thunderbird | < 91.6.0-r0 | UNKNOWN |
Related
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
7.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
43.4%