Red Hat: CVE-2023-6207: Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (Multiple Advisories)

Red Hat: CVE-2023-6207: Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (Multiple Advisories)

Severity

9

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

11/21/2023

Created

11/29/2023

Added

11/28/2023

Modified

01/28/2025

Description

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

Solution(s)

• redhat-upgrade-firefox
• redhat-upgrade-firefox-debuginfo
• redhat-upgrade-firefox-debugsource
• redhat-upgrade-firefox-x11
• redhat-upgrade-thunderbird
• redhat-upgrade-thunderbird-debuginfo
• redhat-upgrade-thunderbird-debugsource

References

• CVE-2023-6207
• RHSA-2023:7499
• RHSA-2023:7500
• RHSA-2023:7501
• RHSA-2023:7503
• RHSA-2023:7504
• RHSA-2023:7505
• RHSA-2023:7506
• RHSA-2023:7507
• RHSA-2023:7508
• RHSA-2023:7509
• RHSA-2023:7510
• RHSA-2023:7511
• RHSA-2023:7512
• RHSA-2023:7577

View more