跳转到帖子

Oracle Linux: CVE-2023-0767: ELSA-2023-0810: firefox security update (IMPORTANT) (Multiple Advisories)

recommended_posts

发布于
  • Members

Oracle Linux: CVE-2023-0767: ELSA-2023-0810:firefox security update (IMPORTANT) (Multiple Advisories)

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
02/14/2023
Created
02/22/2023
Added
02/21/2023
Modified
01/07/2025

Description

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. The Mozilla Foundation Security Advisory describes this flaw as: An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled.

Solution(s)

  • oracle-linux-upgrade-firefox
  • oracle-linux-upgrade-firefox-x11
  • oracle-linux-upgrade-nspr
  • oracle-linux-upgrade-nspr-devel
  • oracle-linux-upgrade-nss
  • oracle-linux-upgrade-nss-devel
  • oracle-linux-upgrade-nss-pkcs11-devel
  • oracle-linux-upgrade-nss-softokn
  • oracle-linux-upgrade-nss-softokn-devel
  • oracle-linux-upgrade-nss-softokn-freebl
  • oracle-linux-upgrade-nss-softokn-freebl-devel
  • oracle-linux-upgrade-nss-sysinit
  • oracle-linux-upgrade-nss-tools
  • oracle-linux-upgrade-nss-util
  • oracle-linux-upgrade-nss-util-devel
  • oracle-linux-upgrade-thunderbird

References

  • https://attackerkb.com/topics/cve-2023-0767
  • CVE - 2023-0767
  • ELSA-2023-0810
  • ELSA-2023-0808
  • ELSA-2023-0821
  • ELSA-2023-0812
  • ELSA-2023-1332
  • ELSA-2023-0824
  • ELSA-2023-1252
  • ELSA-2023-1368
  • ELSA-2023-12238
  • ELSA-2023-0817
View more
  • 查看数 695
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…