Lucene search
HistorySep 27, 2023 - 3:19 p.m.
CVE-2023-5172
firefox
ion engine
use-after-free
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.001
Percentile
34.9%
A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox < 118.
Affected configurations
Node
mozillafirefoxRange<118
Related
ubuntucve
ubuntucve
CVE-2023-5172
2023-09-28 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-10-08 08:08:02
cve
cve
CVE-2023-5172
2023-09-27 15:19:42
debiancve
debiancve
CVE-2023-5172
2023-09-27 15:19:42
cnvd
cnvd
Mozilla Firefox Memory Misreference Vulnerability (CNVD-2023-75343)
2023-10-07 00:00:00
alpinelinux
alpinelinux
CVE-2023-5172
2023-09-27 15:19:00
cvelist
cvelist
CVE-2023-5172
2023-09-27 14:13:33
prion
prion
Design/Logic Flaw
2023-09-27 15:19:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2023-41) - Linux
2023-09-26 00:00:00
Ubuntu: Security Advisory (USN-6404-1)
2023-10-04 00:00:00
Ubuntu: Security Advisory (USN-6404-2)
2023-10-12 00:00:00
ubuntu
ubuntu
Firefox regressions
2023-10-11 00:00:00
Firefox vulnerabilities
2023-10-03 00:00:00
osv
osv
firefox regressions
2023-10-11 03:15:55
firefox vulnerabilities
2023-10-03 06:27:06
MozillaFirefox-118.0.1-1.1 on GA media
2024-06-15 00:00:00
nessus
nessus
Ubuntu 20.04 LTS : Firefox vulnerabilities (USN-6404-1)
2023-10-03 00:00:00
Ubuntu 20.04 LTS : Firefox regressions (USN-6404-2)
2023-10-11 00:00:00
Fedora 38 : firefox (2023-587dc80bb1)
2023-09-28 00:00:00
kaspersky
kaspersky
KLA60812 Multiple vulnerabilities in Mozilla Firefox
2023-09-26 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 118 — Mozilla
2023-09-26 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2371
2024-03-12 12:37:38
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2024-01-07 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.001
Percentile
34.9%
Related for NVD:CVE-2023-5172