USN-6404-1

Dashboard / Vulnerabilities / USN-6404-1

USN-6404-1

Summary: firefox vulnerabilities

Details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2023-5169, CVE-2023-5170, CVE-2023-5171, CVE-2023-5172, CVE-2023-5175, CVE-2023-5176) Ronald Crane discovered that Firefox did not properly manage memory when non-HTTPS Alternate Services (network.http.altsvc.oe) is enabled. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2023-5173) Clément Lecigne discovered that Firefox did not properly manage memory when handling VP8 media stream. An attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-5217)

References: https://ubuntu.com/security/notices/USN-6404-1, https://ubuntu.com/security/CVE-2023-5169, https://ubuntu.com/security/CVE-2023-5170, https://ubuntu.com/security/CVE-2023-5171, https://ubuntu.com/security/CVE-2023-5172, https://ubuntu.com/security/CVE-2023-5173, https://ubuntu.com/security/CVE-2023-5175, https://ubuntu.com/security/CVE-2023-5176, https://ubuntu.com/security/CVE-2023-5217