Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-23983
HistoryMar 24, 2021 - 12:00 a.m.

CVE-2021-23983

2021-03-2400:00:00
ubuntu.com
ubuntu.com
16
cve-2021-23983
css rule
memory corruption
potentially exploitable
firefox 87
bugzilla
spidermonkey javascript engine

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

39.2%

By causing a transition on a parent node by removing a CSS rule, an invalid
property for a marker could have been applied, resulting in memory
corruption and a potentially exploitable crash. This vulnerability affects
Firefox < 87.

Bugs

Notes

Author Note
tyhicks mozjs contains a copy of the SpiderMonkey JavaScript engine
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchfirefox< 87.0+build3-0ubuntu0.18.04.2UNKNOWN
ubuntu20.04noarchfirefox< 87.0+build3-0ubuntu0.20.04.2UNKNOWN
ubuntu20.10noarchfirefox< 87.0+build3-0ubuntu0.20.10.1UNKNOWN
ubuntu21.04noarchfirefox< 87.0+build3-0ubuntu1UNKNOWN
ubuntu21.10noarchfirefox< 87.0+build3-0ubuntu1UNKNOWN
ubuntu22.04noarchfirefox< 87.0+build3-0ubuntu1UNKNOWN
ubuntu22.10noarchfirefox< 87.0+build3-0ubuntu1UNKNOWN
ubuntu23.04noarchfirefox< 87.0+build3-0ubuntu1UNKNOWN
ubuntu23.10noarchfirefox< 87.0+build3-0ubuntu1UNKNOWN
ubuntu24.04noarchfirefox< 87.0+build3-0ubuntu1UNKNOWN
Rows per page:
1-10 of 161

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

39.2%