Lucene search
RedHatRHSA-2024:1982HistoryApr 23, 2024 - 12:18 p.m.
(RHSA-2024:1982) Low: thunderbird security update
2024-04-2312:18:30
access.redhat.com
11
thunderbird
security update
denial of service
http/2
cve-2024-3302
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.5
Confidence
High
EPSS
0
Percentile
10.3%
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 115.10.0.
Security Fix(es):
- Mozilla: Denial of Service using HTTP/2 CONTINUATION frames (CVE-2024-3302)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | ppc64le | thunderbird-debuginfo | < 115.10.0-2.el8_4 | thunderbird-debuginfo-115.10.0-2.el8_4.ppc64le.rpm |
| RedHat | 8 | x86_64 | thunderbird | < 115.10.0-2.el8_4 | thunderbird-115.10.0-2.el8_4.x86_64.rpm |
| RedHat | 8 | x86_64 | thunderbird-debugsource | < 115.10.0-2.el8_4 | thunderbird-debugsource-115.10.0-2.el8_4.x86_64.rpm |
| RedHat | 8 | ppc64le | thunderbird | < 115.10.0-2.el8_4 | thunderbird-115.10.0-2.el8_4.ppc64le.rpm |
| RedHat | 8 | ppc64le | thunderbird-debugsource | < 115.10.0-2.el8_4 | thunderbird-debugsource-115.10.0-2.el8_4.ppc64le.rpm |
| RedHat | 8 | x86_64 | thunderbird-debuginfo | < 115.10.0-2.el8_4 | thunderbird-debuginfo-115.10.0-2.el8_4.x86_64.rpm |
Related
redhat
redhat
(RHSA-2024:1908) Important: firefox security update
2024-04-18 09:05:44
(RHSA-2024:1906) Important: firefox security update
2024-04-18 09:05:27
(RHSA-2024:1907) Important: firefox security update
2024-04-18 09:05:35
nessus
nessus
RHEL 9 : thunderbird (RHSA-2024:1938)
2024-04-25 00:00:00
RHEL 8 : firefox (RHSA-2024:1909)
2024-04-18 00:00:00
osv
osv
thunderbird vulnerabilities
2024-04-25 03:24:59
thunderbird - security update
2024-04-22 00:00:00
firefox-esr - security update
2024-04-19 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2024-04-25 00:00:00
Firefox regressions
2024-05-02 00:00:00
Firefox vulnerabilities
2024-04-24 00:00:00
debian
debian
[SECURITY] [DSA 5663-1] firefox-esr security update
2024-04-17 17:21:09
[SECURITY] [DLA 3790-1] firefox-esr security update
2024-04-19 10:39:37
[SECURITY] [DLA 3791-1] thunderbird security update
2024-04-22 08:49:04
openvas
openvas
Debian: Security Advisory (DSA-5663-1)
2024-04-18 00:00:00
Mozilla Firefox ESR Security Update (mfsa_2024-19) - Mac OS X
2024-04-17 00:00:00
Ubuntu: Security Advisory (USN-6750-1)
2024-04-26 00:00:00
rocky
rocky
firefox security update
2024-05-10 14:32:42
firefox security update
2024-05-06 13:04:21
almalinux
almalinux
Important: firefox security update
2024-04-18 00:00:00
Important: firefox security update
2024-04-18 00:00:00
Low: thunderbird security update
2024-04-22 00:00:00
oraclelinux
oraclelinux
firefox security update
2024-04-18 00:00:00
firefox security update
2024-04-19 00:00:00
firefox security update
2024-04-19 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2024-07-06 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2024-05-12 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 115.10 — Mozilla
2024-04-16 00:00:00
Security Vulnerabilities fixed in Thunderbird 115.10 — Mozilla
2024-04-16 00:00:00
Security Vulnerabilities fixed in Firefox 125 — Mozilla
2024-04-16 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerabilities
2024-04-27 09:26:16
Updated thunderbird packages fix security vulnerabilities
2024-04-27 03:37:18
slackware
slackware
[slackware-security] mozilla-firefox
2024-04-16 18:53:34
kaspersky
kaspersky
KLA65640 Multiple vulnerabilities in Mozilla Firefox ESR
2024-04-16 00:00:00
KLA65693 Multiple vulnerabilities in Mozilla Thunderbird
2024-04-16 00:00:00
KLA65639 Multiple vulnerabilities in Mozilla Firefox
2024-04-16 00:00:00
ubuntucve
ubuntucve
cvelist
cvelist
nvd
nvd
redhatcve
redhatcve
vulnrichment
vulnrichment
debiancve
debiancve
cgr
cgr
CVE-2024-3854 vulnerabilities
2024-05-19 03:07:16
CVE-2024-3852 vulnerabilities
2024-05-19 03:07:16
CVE-2024-3861 vulnerabilities
2024-05-19 03:07:16
cve
cve
veracode
veracode
Incorrect Return Value
2024-04-19 01:24:15
Out-of-Bounds-Read
2024-04-19 01:24:44
Use-After-Free
2024-04-19 01:20:50
cnvd
cnvd
Mozilla Firefox Clickjacking Vulnerability (CNVD-2024-14973)
2024-03-21 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.5
Confidence
High
EPSS
0
Percentile
10.3%
Related for RHSA-2024:1982