CVE-2024-5702

2024-06-1700:00:00

ubuntu.com

memory corruption

networking stack

firefox

firefox esr

thunderbird

vulnerability

exploitable crash

cve-2024-5702

linux

snap package

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.3%

JSON

Memory corruption in the networking stack could have led to a potentially
exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR <
115.12, and Thunderbird < 115.12.

Notes

Author	Note
tyhicks	mozjs contains a copy of the SpiderMonkey JavaScript engine
mdeslaur	starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap starting with Ubuntu 24.04, the thunderbird package is just a script that installs the Thunderbird snap

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchfirefox< 125.0.2+build1-0ubuntu0.20.04.2UNKNOWN
ubuntu20.04noarchthunderbird< 1:115.12.0+build3-0ubuntu0.20.04.1UNKNOWN
ubuntu22.04noarchthunderbird< 1:115.12.0+build3-0ubuntu0.22.04.1UNKNOWN
ubuntu23.10noarchthunderbird< 1:115.12.0+build3-0ubuntu0.23.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	firefox	< 125.0.2+build1-0ubuntu0.20.04.2	UNKNOWN
ubuntu	20.04	noarch	thunderbird	< 1:115.12.0+build3-0ubuntu0.20.04.1	UNKNOWN
ubuntu	22.04	noarch	thunderbird	< 1:115.12.0+build3-0ubuntu0.22.04.1	UNKNOWN
ubuntu	23.10	noarch	thunderbird	< 1:115.12.0+build3-0ubuntu0.23.10.1	UNKNOWN