Lucene search
Redhat.comRH:CVE-2023-25735HistoryFeb 16, 2023 - 9:30 a.m.
CVE-2023-25735
2023-02-1609:30:38
redhat.com
access.redhat.com
19
cross-compartment wrappers
proxy
use-after-free
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
58.9%
The Mozilla Foundation Security Advisory describes this flaw as: Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.
Related
cve
cve
CVE-2023-25735
2023-06-02 17:15:11
veracode
veracode
Denial Of Service (DoS)
2023-02-25 20:49:58
prion
prion
Design/Logic Flaw
2023-06-02 17:15:00
cvelist
cvelist
CVE-2023-25735
2023-06-02 00:00:00
nvd
nvd
CVE-2023-25735
2023-06-02 17:15:11
debiancve
debiancve
CVE-2023-25735
2023-06-02 17:15:11
ubuntucve
ubuntucve
CVE-2023-25735
2023-02-15 00:00:00
alpinelinux
alpinelinux
CVE-2023-25735
2023-06-02 17:15:11
nessus
nessus
EulerOS Virtualization 2.9.0 : mozjs60 (EulerOS-SA-2024-1473)
2024-03-21 00:00:00
EulerOS 2.0 SP9 : mozjs60 (EulerOS-SA-2024-1201)
2024-02-08 00:00:00
EulerOS 2.0 SP9 : mozjs60 (EulerOS-SA-2024-1181)
2024-02-08 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for mozjs60 (EulerOS-SA-2024-1181)
2024-02-09 00:00:00
Huawei EulerOS: Security Advisory for mozjs60 (EulerOS-SA-2024-1473)
2024-03-21 00:00:00
Huawei EulerOS: Security Advisory for mozjs60 (EulerOS-SA-2024-1458)
2024-03-21 00:00:00
osv
osv
mozjs102 vulnerabilities
2023-05-30 14:32:35
firefox-esr - security update
2023-02-15 00:00:00
Important: firefox security update
2023-02-20 00:00:00
ubuntu
ubuntu
SpiderMonkey vulnerabilities
2023-05-30 00:00:00
Thunderbird vulnerabilities
2023-03-13 00:00:00
Firefox vulnerabilities
2023-02-20 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerability
2023-02-21 00:25:36
Updated thunderbird packages fix security vulnerability
2023-02-21 00:25:36
redhat
redhat
(RHSA-2023:0812) Important: firefox security update
2023-02-20 08:00:12
(RHSA-2023:0811) Important: firefox security update
2023-02-20 08:00:07
(RHSA-2023:0809) Important: firefox security update
2023-02-20 07:59:10
debian
debian
[SECURITY] [DLA 3319-1] firefox-esr security update
2023-02-16 11:30:55
[SECURITY] [DSA 5350-1] firefox-esr security update
2023-02-15 22:15:01
[SECURITY] [DLA 3324-1] thunderbird security update
2023-02-20 08:15:05
oraclelinux
oraclelinux
firefox security update
2023-02-20 00:00:00
firefox security update
2023-02-20 00:00:00
thunderbird security update
2023-02-20 00:00:00
redos
redos
ROS-20230315-01
2023-03-15 00:00:00
centos
centos
firefox security update
2023-02-22 17:50:01
thunderbird security update
2023-02-22 17:48:54
almalinux
almalinux
Important: firefox security update
2023-02-20 00:00:00
Important: thunderbird security update
2023-02-20 00:00:00
Important: firefox security update
2023-02-20 00:00:00
rocky
rocky
firefox security update
2023-02-22 01:09:41
firefox security update
2023-02-22 01:08:53
thunderbird security update
2023-02-22 01:08:53
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 102.8.0-alt1
2023-03-15 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 102.8.0-alt1
2023-03-10 00:00:00
kaspersky
kaspersky
KLA20239 Multiple vulnerabilities in Mozilla Thunderbird
2023-02-15 00:00:00
KLA20238 Multiple vulnerabilities in Mozilla Firefox ESR
2023-02-14 00:00:00
KLA20237 Multiple vulnerabilities in Mozilla Firefox
2023-02-14 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2023-02-15 03:05:52
[slackware-security] mozilla-thunderbird
2023-02-16 22:10:42
amazon
amazon
Important: thunderbird
2023-03-02 22:36:00
Important: thunderbird
2023-03-02 22:36:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 102.8 — Mozilla
2023-02-15 00:00:00
Security Vulnerabilities fixed in Firefox ESR 102.8 — Mozilla
2023-02-14 00:00:00
Security Vulnerabilities fixed in Firefox 110 — Mozilla
2023-02-14 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2023-05-30 00:00:00
Mozilla Firefox: Multiple Vulnerabilities
2023-05-30 00:00:00
ibm
ibm
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
58.9%
Related for RH:CVE-2023-25735