Lucene search
Ubuntu.comUB:CVE-2023-32209HistoryMay 10, 2023 - 12:00 a.m.
CVE-2023-32209
2023-05-1000:00:00
ubuntu.com
ubuntu.com
17
cve-2023-32209
malicious favicon
out of memory
firefox
snap
ubuntu 22.04
vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
51.3%
A maliciously crafted favicon could have led to an out of memory crash.
This vulnerability affects Firefox < 113.
Notes
| Author | Note |
|---|---|
| tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine |
| mdeslaur | starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | firefox | < 113.0+build2-0ubuntu0.18.04.1 | UNKNOWN |
| ubuntu | 20.04 | noarch | firefox | < 113.0+build2-0ubuntu0.20.04.1 | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs38 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs68 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs78 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs91 | < any | UNKNOWN |
Related
cve
cve
CVE-2023-32209
2023-06-19 10:15:09
veracode
veracode
Denial Of Service (DoS)
2023-08-06 09:35:16
debiancve
debiancve
CVE-2023-32209
2023-06-19 10:15:09
prion
prion
Memory corruption
2023-06-19 10:15:00
nvd
nvd
CVE-2023-32209
2023-06-19 10:15:09
cvelist
cvelist
CVE-2023-32209
2023-06-19 09:36:11
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-6074-1)
2023-05-15 00:00:00
Mozilla Firefox < 113.0
2023-05-09 00:00:00
Mozilla Firefox < 113.0
2023-05-09 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2023-16) - Linux
2023-05-10 00:00:00
Ubuntu: Security Advisory (USN-6074-1)
2023-05-16 00:00:00
Ubuntu: Security Advisory (USN-6074-2)
2023-05-17 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2023-05-15 00:00:00
Firefox regressions
2023-05-24 00:00:00
Firefox regressions
2023-05-16 00:00:00
osv
osv
firefox regressions
2023-05-16 04:18:05
firefox regressions
2023-05-24 09:48:18
firefox vulnerabilities
2023-05-15 04:06:24
kaspersky
kaspersky
KLA49165 Multiple vulnerabilities in Mozilla Firefox
2023-05-09 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 113 — Mozilla
2023-05-09 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2024-01-07 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
51.3%
Related for UB:CVE-2023-32209