Lucene search
PRIOn knowledge basePRION:CVE-2021-43539HistoryDec 08, 2021 - 10:15 p.m.
Design/Logic Flaw
2021-12-0822:15:00
PRIOn knowledge base
www.prio-n.com
8
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 9.0 | |
| debian_linux | eq | 10.0 | |
| debian_linux | eq | 11.0 | |
| firefox | lt | 95.0 | |
| firefox_esr | lt | 91.4.0 | |
| thunderbird | lt | 91.4.0 |
References
bugzilla.mozilla.org/show_bug.cgi?id=1739683
lists.debian.org/debian-lts-announce/2021/12/msg00030.html
lists.debian.org/debian-lts-announce/2022/01/msg00001.html
security.gentoo.org/glsa/202202-03
security.gentoo.org/glsa/202208-14
www.debian.org/security/2021/dsa-5026
www.debian.org/security/2022/dsa-5034
www.mozilla.org/security/advisories/mfsa2021-52/
www.mozilla.org/security/advisories/mfsa2021-53/
www.mozilla.org/security/advisories/mfsa2021-54/
Related
veracode
veracode
Denial Of Service (DoS)
2021-12-10 07:36:52
cnvd
cnvd
Mozilla Firefox Resource Management Error Vulnerability (CNVD-2021-99619)
2021-12-12 00:00:00
ubuntucve
ubuntucve
CVE-2021-43539
2021-12-08 00:00:00
nvd
nvd
CVE-2021-43539
2021-12-08 22:15:09
redhatcve
redhatcve
CVE-2021-43539
2021-12-08 03:03:55
debiancve
debiancve
CVE-2021-43539
2021-12-08 22:15:09
cvelist
cvelist
CVE-2021-43539
2021-12-08 21:20:15
cve
cve
CVE-2021-43539
2021-12-08 22:15:09
alpinelinux
alpinelinux
CVE-2021-43539
2021-12-08 22:15:09
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0475
2023-09-21 00:00:00
oraclelinux
oraclelinux
firefox security update
2021-12-09 00:00:00
firefox security update
2021-12-08 00:00:00
thunderbird security update
2021-12-10 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2021-12-12 00:00:00
Security update for MozillaFirefox (important)
2021-12-10 00:00:00
Security update for MozillaThunderbird (important)
2021-12-22 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:14859-1)
2021-12-11 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:3995-1)
2021-12-11 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:3993-1)
2021-12-11 00:00:00
almalinux
almalinux
Important: firefox security update
2021-12-08 09:42:58
Important: thunderbird security update
2021-12-09 12:14:59
nessus
nessus
SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:3993-1)
2021-12-11 00:00:00
SUSE SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:3995-1)
2021-12-11 00:00:00
CentOS 8 : firefox (CESA-2021:5013)
2021-12-10 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 91.4.0-alt1
2021-12-14 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 91.4.0-alt1
2021-12-21 00:00:00
osv
osv
Important: firefox security update
2021-12-08 09:42:58
Important: firefox security update
2021-12-08 09:42:58
firefox regressions
2021-12-20 22:35:44
archlinux
archlinux
[ASA-202112-8] firefox: multiple issues
2021-12-11 00:00:00
[ASA-202112-9] thunderbird: multiple issues
2021-12-11 00:00:00
ubuntu
ubuntu
Firefox regressions
2021-12-20 00:00:00
Firefox vulnerabilities
2021-12-09 00:00:00
Thunderbird vulnerabilities
2022-01-21 00:00:00
centos
centos
firefox security update
2021-12-14 00:04:22
rocky
rocky
firefox security update
2021-12-08 09:42:58
thunderbird security update
2021-12-09 12:14:59
redhat
redhat
(RHSA-2021:5014) Important: firefox security update
2021-12-08 09:42:59
(RHSA-2021:5013) Important: firefox security update
2021-12-08 09:42:58
(RHSA-2021:5017) Important: firefox security update
2021-12-08 09:44:27
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 91.4.0 — Mozilla
2021-12-07 00:00:00
Security Vulnerabilities fixed in Thunderbird 91.4.0 — Mozilla
2021-12-07 00:00:00
Security Vulnerabilities fixed in Firefox 95 — Mozilla
2021-12-07 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerability
2021-12-11 01:19:07
Updated thunderbird packages fix security vulnerability
2021-12-11 01:19:07
kaspersky
kaspersky
KLA12375 Multiple vulnerabilities in Mozilla Firefox ESR
2021-12-07 00:00:00
KLA12376 Multiple vulnerabilities in Mozilla Thunderbird
2021-12-07 00:00:00
KLA12374 Multiple vulnerabilities in Mozilla Firefox
2021-12-07 00:00:00
debian
debian
[SECURITY] [DSA 5026-1] firefox-esr security update
2021-12-19 15:23:09
[SECURITY] [DLA 2863-1] firefox-esr security update
2021-12-29 14:08:44
[SECURITY] [DSA 5034-1] thunderbird security update
2022-01-02 17:01:50
ibm
ibm
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2022-02-21 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2022-08-10 00:00:00