Lucene search
PRIOn knowledge basePRION:CVE-2021-38504HistoryDec 08, 2021 - 10:15 p.m.
Design/Logic Flaw
2021-12-0822:15:00
PRIOn knowledge base
www.prio-n.com
5
When interacting with an HTML input element’s file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 9.0 | |
| debian_linux | eq | 10.0 | |
| debian_linux | eq | 11.0 | |
| firefox | lt | 94.0 | |
| firefox_esr | lt | 91.3.0 | |
| thunderbird | lt | 91.3.0 |
References
bugzilla.mozilla.org/show_bug.cgi?id=1730156
lists.debian.org/debian-lts-announce/2021/12/msg00030.html
lists.debian.org/debian-lts-announce/2022/01/msg00001.html
security.gentoo.org/glsa/202202-03
security.gentoo.org/glsa/202208-14
www.debian.org/security/2021/dsa-5026
www.debian.org/security/2022/dsa-5034
www.mozilla.org/security/advisories/mfsa2021-48/
www.mozilla.org/security/advisories/mfsa2021-49/
www.mozilla.org/security/advisories/mfsa2021-50/
Related
ubuntucve
ubuntucve
CVE-2021-38504
2021-11-03 00:00:00
nvd
nvd
CVE-2021-38504
2021-12-08 22:15:08
cve
cve
CVE-2021-38504
2021-12-08 22:15:08
veracode
veracode
Denial Of Service (DoS)
2021-11-05 03:35:56
alpinelinux
alpinelinux
CVE-2021-38504
2021-12-08 22:15:08
redhatcve
redhatcve
CVE-2021-38504
2021-11-03 01:09:50
cvelist
cvelist
CVE-2021-38504
2021-12-08 21:21:59
debiancve
debiancve
CVE-2021-38504
2021-12-08 22:15:08
malwarebytes
malwarebytes
Update now! Mozilla fixes security vulnerabilities in Firefox 94
2021-11-03 14:23:29
openvas
openvas
Ubuntu: Security Advisory (USN-5152-1)
2022-01-28 00:00:00
CentOS: Security Advisory for thunderbird (CESA-2021:4134)
2021-11-18 00:00:00
Mozilla Firefox Security Advisory (MFSA2021-48) - Linux
2021-11-08 00:00:00
nessus
nessus
Ubuntu 21.10 : Thunderbird vulnerabilities (USN-5152-1)
2021-11-19 00:00:00
Oracle Linux 7 : thunderbird (ELSA-2021-4134)
2021-11-05 00:00:00
CentOS 7 : firefox (CESA-2021:4116)
2021-11-17 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2021-11-18 00:00:00
Firefox vulnerabilities
2021-11-03 00:00:00
Thunderbird vulnerabilities
2022-01-21 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2021-11-05 00:00:00
thunderbird security update
2021-11-05 00:00:00
firefox security update
2021-11-04 00:00:00
osv
osv
Important: thunderbird security update
2021-11-04 16:03:41
Important: firefox security update
2021-11-03 19:23:08
firefox vulnerabilities
2021-11-03 20:09:06
archlinux
archlinux
[ASA-202111-2] firefox: multiple issues
2021-11-05 00:00:00
[ASA-202111-3] thunderbird: multiple issues
2021-11-05 00:00:00
almalinux
almalinux
Important: firefox security update
2021-11-03 19:23:08
Important: thunderbird security update
2021-11-04 16:03:41
centos
centos
firefox security update
2021-11-17 15:24:37
thunderbird security update
2021-11-17 15:26:59
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 91.3.0-alt1
2021-11-10 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 91.3.0-alt1
2021-11-09 00:00:00
redhat
redhat
(RHSA-2021:4130) Important: thunderbird security update
2021-11-04 16:03:41
(RHSA-2021:4607) Important: firefox security update
2021-11-10 09:03:16
(RHSA-2021:4116) Important: firefox security update
2021-11-03 14:54:02
mageia
mageia
Updated firefox packages fix security vulnerability
2021-11-11 01:53:34
Updated thunderbird packages fix security vulnerabilities
2021-11-11 01:53:34
suse
suse
Security update for MozillaFirefox (important)
2021-11-19 00:00:00
Security update for MozillaThunderbird (important)
2021-12-29 00:00:00
Security update for MozillaThunderbird (important)
2021-12-22 00:00:00
rocky
rocky
firefox security update
2021-11-03 19:23:08
thunderbird security update
2021-11-04 16:03:41
kaspersky
kaspersky
KLA12336 Multiple vulnerabilities in Mozilla Firefox ESR
2021-11-02 00:00:00
KLA12352 Multiple vulnerabilities in Mozilla Thunderbird
2021-11-03 00:00:00
KLA12335 Multiple vulnerabilities in Mozilla Firefox
2021-11-02 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 91.3 — Mozilla
2021-11-02 00:00:00
Security Vulnerabilities fixed in Thunderbird 91.3 — Mozilla
2021-11-03 00:00:00
Security Vulnerabilities fixed in Firefox 94 — Mozilla
2021-11-02 00:00:00
debian
debian
[SECURITY] [DLA 2863-1] firefox-esr security update
2021-12-29 14:08:44
[SECURITY] [DSA 5026-1] firefox-esr security update
2021-12-19 15:23:09
[SECURITY] [DSA 5034-1] thunderbird security update
2022-01-02 17:01:50
ibm
ibm
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2022-02-21 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2022-08-10 00:00:00