The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:7508 advisory.

  - Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer (CVE-2023-6204)

  - Mozilla: Use-after-free in MessagePort::Entangled (CVE-2023-6205)

  - Mozilla: Clickjacking permission prompts using the fullscreen transition (CVE-2023-6206)

  - Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer (CVE-2023-6207)

  - Mozilla: Using Selection API would copy contents into X11 primary selection. (CVE-2023-6208)

  - Mozilla: Incorrect parsing of relative URLs starting with /// (CVE-2023-6209)

  - Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 (CVE-2023-6212)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 8 : firefox (RHSA-2023:7508)

high Nessus Plugin ID 186315

Version 1.4

Version 1.3

Version 1.2

Version 1.2

Version 1.1

Version 1.0

Version 1.4 Dec 22, 2023, 10:57 AM IAVM reference Plugin Feed: 202312221057
Version 1.3 Dec 1, 2023, 12:20 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202312011220
Version 1.2 Nov 29, 2023, 3:21 PM CVSS metrics ("CVSSv2 score" set to 10.0. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C". "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H". "CVSSv3 score" set to 8.8) Plugin Feed: 202311291521
Version 1.2 Dec 1, 2023, 10:14 AM IAVM reference STIG Severity (set to "I") Plugin Feed: 202312011014
Version 1.1 Nov 28, 2023, 2:15 PM CVSS metrics ("CVSSv2 score" set to 7.5. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P". "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H". "CVSSv3 score" set to 9.8) Plugin Feed: 202311281415
Version 1.0 Nov 28, 2023, 12:04 AM New Plugin Feed: 202311280004