Lucene search
Ubuntu.comUB:CVE-2024-4774HistoryMay 14, 2024 - 12:00 a.m.
CVE-2024-4774
2024-05-1400:00:00
ubuntu.com
ubuntu.com
8
shmemcharmaphashentry
firefox
vulnerability
move semantics
undefined behavior
version 126
The ShmemCharMapHashEntry() code was susceptible to potentially undefined
behavior by bypassing the move semantics for one of its data members. This
vulnerability affects Firefox < 126.
Notes
| Author | Note |
|---|---|
| tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine |
| mdeslaur | starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap starting with Ubuntu 24.04, the thunderbird package is just a script that installs the Thunderbird snap |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 20.04 | noarch | firefox | < 126.0+build2-0ubuntu0.20.04.1 | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs102 | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | mozjs102 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs38 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs68 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs78 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs91 | < any | UNKNOWN |
References
bugzilla.mozilla.org/show_bug.cgi?id=1886598
launchpad.net/bugs/cve/CVE-2024-4774
nvd.nist.gov/vuln/detail/CVE-2024-4774
security-tracker.debian.org/tracker/CVE-2024-4774
ubuntu.com/security/notices/USN-6779-1
www.cve.org/CVERecord?id=CVE-2024-4774
www.mozilla.org/en-US/security/advisories/mfsa2024-21/#CVE-2024-4774
www.mozilla.org/security/advisories/mfsa2024-21/
Related
debiancve
debiancve
CVE-2024-4774
2024-05-14 18:15:15
cvelist
cvelist
CVE-2024-4774
2024-05-14 17:21:26
nvd
nvd
CVE-2024-4774
2024-05-14 18:15:15
veracode
veracode
Potentially Undefined Behavior
2024-05-20 12:18:23
vulnrichment
vulnrichment
CVE-2024-4774
2024-05-14 17:21:26
cve
cve
CVE-2024-4774
2024-05-14 18:15:15
osv
osv
CVE-2024-4774
2024-05-14 18:15:00
firefox regressions
2024-05-29 04:25:29
firefox vulnerabilities
2024-05-21 05:46:27
nessus
nessus
Ubuntu 20.04 LTS : Firefox vulnerabilities (USN-6779-1)
2024-05-21 00:00:00
Ubuntu 20.04 LTS : Firefox regressions (USN-6779-2)
2024-05-29 00:00:00
Fedora 40 : firefox (2024-eabe68b149)
2024-05-18 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6779-2)
2024-05-30 00:00:00
Mozilla Firefox Security Update (mfsa_2024-21) - Windows
2024-05-17 00:00:00
Ubuntu: Security Advisory (USN-6779-1)
2024-05-22 00:00:00
ubuntu
ubuntu
Firefox regressions
2024-05-29 00:00:00
Firefox vulnerabilities
2024-05-21 00:00:00
kaspersky
kaspersky
KLA67588 Multiple vulnerabilities in Mozilla Firefox
2024-05-14 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 126 — Mozilla
2024-05-14 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2024-08-06 00:00:00