Denial Of Service (DoS)

2023-11-2814:45:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

firefox

vulnerability

memory corruption

arbitrary code execution

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.3%

JSON

Firefox is vulnerable to Denial Of Service (DoS). The vulnerability exists due to memory safety bugs present in the library. These bugs lead to memory corruption, potentially resulting in arbitrary code execution.

CPENameOperatorVersion
firefox-esr:sideq78.5.0esr-1
firefox-esr:sideq78.8.0esr-1
firefox-esr:bustereq68.12.0esr-1~deb10u1
firefox-esr:bustereq78.7.0esr-1~deb10u1
firefox-esr:bustereq78.11.0esr-1~deb10u1
firefox-esr:bustereq78.5.0esr-1~deb10u1
firefox-esr:bustereq78.8.0esr-1~deb10u1
thunderbird:sideq1:78.5.0-1
firefox-esr:bullseyeeq78.5.0esr-1
thunderbird:bullseyeeq1:78.5.0-1

Name	Operator	Version
firefox-esr:sid	eq	78.5.0esr-1
firefox-esr:sid	eq	78.8.0esr-1
firefox-esr:buster	eq	68.12.0esr-1~deb10u1
firefox-esr:buster	eq	78.7.0esr-1~deb10u1
firefox-esr:buster	eq	78.11.0esr-1~deb10u1
firefox-esr:buster	eq	78.5.0esr-1~deb10u1
firefox-esr:buster	eq	78.8.0esr-1~deb10u1
thunderbird:sid	eq	1:78.5.0-1
firefox-esr:bullseye	eq	78.5.0esr-1
thunderbird:bullseye	eq	1:78.5.0-1