The Mozilla Foundation Security Advisory describes this flaw as: Applying a CSS filter effect could have accessed out-of-bounds memory. This could have led to a heap-buffer-overflow, causing a potentially exploitable crash.

References

bugzilla.redhat.com/show_bug.cgi?id=2039566

nvd.nist.gov/vuln/detail/CVE-2022-22738

www.cve.org/CVERecord?id=CVE-2022-22738

www.mozilla.org/en-US/security/advisories/mfsa2022-02/#CVE-2022-22738

www.mozilla.org/en-US/security/advisories/mfsa2022-03/#CVE-2022-22738

cnvd 1

nvd 1

cve 1

cvelist 1

alpinelinux 1

prion 1

debiancve 1

veracode 1

ubuntucve 1

nessus 49

openvas 24

redhat 10

osv 10

debian 4

centos 2

oraclelinux 4

rocky 2

almalinux 2

mageia 2

redos 1

kaspersky 3

altlinux 2

mozilla 3

suse 2

ubuntu 3

hivepro 1

amazon 2

ibm 2

gentoo 2

cnvd

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2023-03061)

2023-01-06 00:00:00

nvd

CVE-2022-22738

2022-12-22 20:15:14

cve

CVE-2022-22738

2022-12-22 20:15:14

cvelist

CVE-2022-22738

2022-12-22 00:00:00

alpinelinux

CVE-2022-22738

2022-12-22 20:15:14

prion

Heap overflow

2022-12-22 20:15:00

debiancve

CVE-2022-22738

2022-12-22 20:15:14

veracode

Denial Of Service (DoS)

2022-01-14 05:54:05

ubuntucve

CVE-2022-22738

2022-01-13 00:00:00

nessus

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:0124)

2022-01-13 00:00:00

RHEL 7 : thunderbird (RHSA-2022:0127)

2022-01-13 00:00:00

RHEL 8 : firefox (RHSA-2022:0126)

2022-01-13 00:00:00

openvas

Mozilla Thunderbird Security Advisories (MFSA2022-01, MFSA2022-03) - Mac OS X

2022-01-14 00:00:00

Mageia: Security Advisory (MGASA-2022-0019)

2022-01-28 00:00:00

Mozilla Firefox ESR Security Advisories (MFSA2021-55, MFSA2022-03) - Mac OS X

2022-01-14 00:00:00

redhat

(RHSA-2022:0124) Important: firefox security update

2022-01-12 11:24:47

(RHSA-2022:0126) Important: firefox security update

2022-01-12 11:27:52

(RHSA-2022:0123) Important: thunderbird security update

2022-01-12 09:48:13

osv

firefox-esr - security update

2022-01-13 00:00:00

Important: firefox security update

2022-01-12 11:30:14

Important: thunderbird security update

2022-01-12 11:29:46

debian

[SECURITY] [DSA 5044-1] firefox-esr security update

2022-01-13 18:47:15

[SECURITY] [DLA 2881-1] thunderbird security update

2022-01-16 10:56:46

[SECURITY] [DSA 5045-1] thunderbird security update

2022-01-14 18:25:24

centos

thunderbird security update

2022-01-18 13:44:49

firefox security update

2022-01-18 13:44:03

oraclelinux

thunderbird security update

2022-01-13 00:00:00

thunderbird security update

2022-01-12 00:00:00

firefox security update

2022-01-12 00:00:00

rocky

thunderbird security update

2022-01-12 11:29:46

firefox security update

2022-01-12 11:30:14

almalinux

Important: firefox security update

2022-01-12 11:30:14

Important: thunderbird security update

2022-01-12 11:29:46

mageia

Updated nss and firefox packages fix security vulnerabilities

2022-01-12 02:22:28

Updated thunderbird packages fix security vulnerability

2022-01-16 23:39:09

redos

ROS-20220114-01

2022-01-14 00:00:00

kaspersky

KLA12416 Multiple vulnerabilities in Mozilla Firefox ESR

2022-01-11 00:00:00

KLA12417 Multiple vulnerabilities in Mozilla Thunderbird

2022-01-11 00:00:00

KLA12415 Multiple vulnerabilities in Mozilla Firefox

2022-01-11 00:00:00

altlinux

Security fix for the ALT Linux 10 package firefox-esr version 91.5.0-alt1

2022-01-19 00:00:00

Security fix for the ALT Linux 10 package thunderbird version 91.5.0-alt1

2022-01-20 00:00:00

mozilla

Security Vulnerabilities fixed in Firefox ESR 91.5 — Mozilla

2022-01-11 00:00:00

Security Vulnerabilities fixed in Thunderbird 91.5 — Mozilla

2022-01-11 00:00:00

Security Vulnerabilities fixed in Firefox 96 — Mozilla

2022-01-11 00:00:00

suse

Security update for MozillaFirefox (moderate)

2022-05-18 00:00:00

Security update for MozillaThunderbird (important)

2022-01-26 00:00:00

ubuntu

Firefox vulnerabilities

2022-01-13 00:00:00

Thunderbird vulnerabilities

2022-01-21 00:00:00

Thunderbird vulnerabilities

2022-01-21 00:00:00

hivepro

Mozilla Firefox patches multiple vulnerabilities

2022-01-12 07:57:08

amazon

Important: thunderbird

2022-03-07 23:34:00

Important: thunderbird

2022-07-06 03:17:00

ibm

Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 91.8.0ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0

2022-04-29 04:43:11

Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.

2023-01-31 14:47:39

gentoo

Mozilla Firefox: Multiple vulnerabilities

2022-02-21 00:00:00

Mozilla Thunderbird: Multiple Vulnerabilities

2022-08-10 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

50.6%

JSON

Related for RH:CVE-2022-22738