Lucene search
Veracode Vulnerability DatabaseVERACODE:35788HistoryJun 01, 2022 - 3:18 p.m.
Timing Attack
2022-06-0115:18:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
34
0.001 Low
EPSS
Percentile
46.7%
firefox-esr is vulnerable to timing attack. An attacker allows to send a large number of allowCredential entries and detecting the difference between invalid key handles and cross-origin key handles. This could have led to cross-origin account linking in violation of WebAuthn goals.
References
bugzilla.mozilla.org/show_bug.cgi?id=1730434
secdb.alpinelinux.org/edge/community.yaml
secdb.alpinelinux.org/v3.15/community.yaml
secdb.alpinelinux.org/v3.16/community.yaml
www.mozilla.org/security/advisories/mfsa2022-20/
www.mozilla.org/security/advisories/mfsa2022-21/
www.mozilla.org/security/advisories/mfsa2022-22/
Related
cvelist
cvelist
CVE-2022-31742
2022-12-22 00:00:00
nvd
nvd
CVE-2022-31742
2022-12-22 20:15:29
prion
prion
Cross site scripting
2022-12-22 20:15:00
debiancve
debiancve
CVE-2022-31742
2022-12-22 20:15:29
redhatcve
redhatcve
CVE-2022-31742
2022-05-31 14:53:09
cve
cve
CVE-2022-31742
2022-12-22 20:15:29
alpinelinux
alpinelinux
CVE-2022-31742
2022-12-22 20:15:29
ubuntucve
ubuntucve
CVE-2022-31742
2022-06-01 00:00:00
nessus
nessus
Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:4870)
2022-06-03 00:00:00
RHEL 8 : firefox (RHSA-2022:4876)
2022-06-02 00:00:00
RHEL 8 : firefox (RHSA-2022:4875)
2022-06-02 00:00:00
openvas
openvas
CentOS: Security Advisory for firefox (CESA-2022:4870)
2022-08-03 00:00:00
Mageia: Security Advisory (MGASA-2022-0220)
2022-06-06 00:00:00
Mozilla Firefox ESR Security Advisory (MFSA2022-21) - Mac OS X
2022-07-07 00:00:00
rocky
rocky
firefox security update
2022-06-01 20:09:36
thunderbird security update
2022-06-02 07:48:48
debian
debian
[SECURITY] [DLA 3040-1] firefox-esr security update
2022-06-03 16:36:45
[SECURITY] [DSA 5156-1] firefox-esr security update
2022-06-01 18:50:55
[SECURITY] [DSA 5158-1] thunderbird security update
2022-06-04 17:52:32
redhat
redhat
(RHSA-2022:4875) Important: firefox security update
2022-06-01 15:01:07
(RHSA-2022:4876) Important: firefox security update
2022-06-01 15:01:54
(RHSA-2022:4871) Important: firefox security update
2022-06-01 21:58:31
oraclelinux
oraclelinux
firefox security update
2022-06-30 00:00:00
firefox security update
2022-06-02 00:00:00
firefox security update
2022-06-02 00:00:00
osv
osv
firefox-esr - security update
2022-06-03 00:00:00
Important: firefox security update
2022-06-01 20:09:36
firefox-esr - security update
2022-06-01 00:00:00
mageia
mageia
Updated firefox/nss/nspr packages fix security vulnerability
2022-06-04 23:25:39
Updated thunderbird packages fix security vulnerability
2022-06-04 23:25:39
centos
centos
firefox security update
2022-08-02 19:45:49
thunderbird security update
2022-08-02 19:48:11
slackware
slackware
[slackware-security] mozilla-firefox
2022-06-01 00:53:57
[slackware-security] mozilla-thunderbird
2022-06-02 19:43:23
amazon
amazon
Important: thunderbird
2022-07-19 01:23:00
Important: thunderbird
2022-07-19 01:23:00
kaspersky
kaspersky
KLA12546 Multiple vulnerabilities in Mozilla Firefox ESR
2022-05-31 00:00:00
KLA12547 Multiple vulnerabilities in Mozilla Thunderbird
2022-05-31 00:00:00
KLA12545 Multiple vulnerabilities in Mozilla Firefox
2022-05-31 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 91.10.0-alt1
2022-06-03 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 91.10.0-alt1
2022-06-03 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 91.10 — Mozilla
2022-05-31 00:00:00
Security Vulnerabilities fixed in Thunderbird 91.10 — Mozilla
2022-05-31 00:00:00
Security Vulnerabilities fixed in Firefox 101 — Mozilla
2022-05-31 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2022-06-02 00:00:00
Security update for MozillaThunderbird (important)
2022-06-13 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2022-06-13 00:00:00
Thunderbird vulnerabilities
2022-07-14 00:00:00
ibm
ibm
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2022-08-10 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2022-08-10 00:00:00