Ubuntu: (CVE-2021-43529): thunderbird vulnerability

Ubuntu: (CVE-2021-43529): thunderbird vulnerability

Severity

10

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

02/16/2023

Created

11/21/2024

Added

11/19/2024

Modified

01/28/2025

Description

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS signatures.

Solution(s)

• ubuntu-upgrade-thunderbird

References

• https://attackerkb.com/topics/cve-2021-43529
• CVE - 2021-43529
• https://www.cve.org/CVERecord?id=CVE-2021-43529
• https://www.openwall.com/lists/oss-security/2021/12/01/6