The remote Ubuntu 18.04 LTS / 20.04 LTS / 21.04 / 21.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5131-1 advisory.

  - The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass     restrictions such as executing scripts or navigating the top-level frame. This vulnerability affects     Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3. (CVE-2021-38503)

  - When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-     free could have resulted, leading to memory corruption and a potentially exploitable crash. This     vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3. (CVE-2021-38504)

  - Through a series of navigations, Firefox could have entered fullscreen mode without notification or     warning to the user. This could lead to spoofing attacks on the browser UI including phishing. This     vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3. (CVE-2021-38506)

  - The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded     to TLS while retaining the visual properties of an HTTP connection, including being same-origin with     unencrypted connections on port 80. However, if a second encrypted port on the same IP address (e.g. port     8443) did not opt-in to opportunistic encryption; a network attacker could forward a connection from the     browser to port 443 to port 8443, causing the browser to treat the content of port 8443 as same-origin     with HTTP. This was resolved by disabling the Opportunistic Encryption feature, which had low usage. This     vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3. (CVE-2021-38507)

  - By displaying a form validity message in the correct location at the same time as a permission prompt     (such as for geolocation), the validity message could have obscured the prompt, resulting in the user     potentially being tricked into granting the permission. This vulnerability affects Firefox < 94,     Thunderbird < 91.3, and Firefox ESR < 91.3. (CVE-2021-38508)

  - Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary     (although unstyled) contents could be displayed over top an uncontrolled webpage of the attacker's     choosing. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
    (CVE-2021-38509)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5131-1)

critical Nessus Plugin ID 154883

Version 1.8

Version 1.7

Version 1.7

Version 1.6

Version 1.8 Oct 16, 2023, 9:38 PM Plugin metadata Detection Plugin Feed: 202310162138
Version 1.7 Jan 18, 2023, 9:01 AM Logic Changes (Added support for s390x) Plugin Feed: 202301180901
Version 1.7 Oct 16, 2023, 7:25 PM Detection Plugin metadata Plugin Feed: 202310161925
Version 1.6 Jan 4, 2023, 11:46 PM Regenerated based on advisory update Plugin Feed: 202301042346