Oracle Linux: CVE-2023-25744: ELSA-2023-0810: firefox security update (IMPORTANT) (Multiple Advisories)

Oracle Linux: CVE-2023-25744: ELSA-2023-0810:firefox security update (IMPORTANT) (Multiple Advisories)

Severity

10

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

02/14/2023

Created

02/22/2023

Added

02/21/2023

Modified

01/07/2025

Description

Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8. The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Kershaw Chang and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Solution(s)

• oracle-linux-upgrade-firefox
• oracle-linux-upgrade-firefox-x11
• oracle-linux-upgrade-thunderbird

References

• https://attackerkb.com/topics/cve-2023-25744
• CVE - 2023-25744
• ELSA-2023-0810
• ELSA-2023-0808
• ELSA-2023-0821
• ELSA-2023-0812
• ELSA-2023-0824
• ELSA-2023-0817

View more