CLEANSTART-2024-MX13970

Dashboard / Vulnerabilities / CLEANSTART-2024-MX13970

CLEANSTART-2024-MX13970

Summary: When resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer

Details: Security vulnerability affects the firefox-esr package. When resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer.

References: https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-MX13970.json, https://osv.dev/vulnerability/CVE-2022-45412, https://nvd.nist.gov/vuln/detail/CVE-2022-45412