Lucene search
GoogleOSV:ALSA-2024:4635HistoryJul 18, 2024 - 12:00 a.m.
Important: thunderbird security update
2024-07-1800:00:00
Google
osv.dev
6
mozilla
thunderbird
security
update
memory safety
bugs
race condition
permission assignment
memory corruption
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Mozilla Thunderbird is a standalone mail and newsgroup client.
Security Fix(es):
- Mozilla: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, and Thunderbird 115.13 (CVE-2024-6604)
- Mozilla: Race condition in permission assignment (CVE-2024-6601)
- Mozilla: Memory corruption in thread creation (CVE-2024-6603)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
Related
rocky
rocky
firefox security update
2024-07-15 12:18:45
thunderbird security update
2024-07-26 12:33:00
thunderbird security update
2024-07-26 12:33:59
redhat
redhat
(RHSA-2024:4500) Important: firefox security update
2024-07-11 11:26:07
(RHSA-2024:4517) Important: firefox security update
2024-07-11 15:02:15
(RHSA-2024:4508) Important: firefox security update
2024-07-11 13:37:26
nessus
nessus
Oracle Linux 9 : firefox (ELSA-2024-4500)
2024-07-12 00:00:00
RHEL 9 : thunderbird (RHSA-2024:4624)
2024-07-18 00:00:00
Rocky Linux 8 : thunderbird (RLSA-2024:4635)
2024-07-26 00:00:00
osv
osv
Important: thunderbird security update
2024-07-18 00:00:00
Important: firefox security update
2024-07-11 00:00:00
Important: thunderbird security update
2024-07-26 12:33:59
almalinux
almalinux
Important: thunderbird security update
2024-07-18 00:00:00
Important: thunderbird security update
2024-07-18 00:00:00
Important: firefox security update
2024-07-11 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2024-07-18 00:00:00
thunderbird security update
2024-07-18 00:00:00
firefox security update
2024-07-11 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2024-07-21 05:28:06
Updated nss & firefox packages fix security vulnerabilities
2024-07-16 06:21:38
openvas
openvas
Mozilla Thunderbird Security Update (mfsa_2024-31) - Windows
2024-07-19 00:00:00
Mageia: Security Advisory (MGASA-2024-0274)
2024-07-22 00:00:00
Mozilla Firefox ESR Security Update (mfsa_2024-30) - Windows
2024-07-11 00:00:00
redos
redos
ROS-20240902-11
2024-09-02 00:00:00
ROS-20240920-11
2024-09-20 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2024-07-22 00:00:00
Firefox vulnerabilities
2024-07-10 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2024-07-23 19:09:25
[slackware-security] mozilla-firefox
2024-07-10 17:52:20
kaspersky
kaspersky
KLA70479 Multiple vulnerabilities in Mozilla Thunderbird
2024-07-15 00:00:00
KLA70405 Multiple vulnerabilities in Mozilla Firefox ESR
2024-07-09 00:00:00
KLA70478 Multiple vulnerabilities in Mozilla Thunderbird
2024-07-11 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 115.13 — Mozilla
2024-07-09 00:00:00
Security Vulnerabilities fixed in Thunderbird 115.13 — Mozilla
2024-07-15 00:00:00
Security Vulnerabilities fixed in Thunderbird 128 — Mozilla
2024-07-11 00:00:00
nvd
nvd
redhatcve
redhatcve
cvelist
cvelist
debiancve
debiancve
vulnrichment
vulnrichment
ubuntucve
ubuntucve
alpinelinux
alpinelinux
wolfi
wolfi
CVE-2024-6604 vulnerabilities
2024-09-20 03:31:47
CVE-2024-6603 vulnerabilities
2024-09-20 03:31:47
CVE-2024-6601 vulnerabilities
2024-09-20 03:31:47
cve
cve
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Related for OSV:ALSA-2024:4635