The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6700 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.3.0 ESR.

    Security Fix(es):

    * Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959)

    * Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960)

    * Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3 (CVE-2022-40962)

    * Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix     (CVE-2022-40958)

    * Mozilla: Content-Security-Policy base-uri bypass (CVE-2022-40956)

    * Mozilla: Incoherent instruction cache when building WASM on ARM64 (CVE-2022-40957)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6703 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.3.0 ESR.

    Security Fix(es):

    * Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959)

    * Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960)

    * Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3 (CVE-2022-40962)

    * Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix     (CVE-2022-40958)

    * Mozilla: Content-Security-Policy base-uri bypass (CVE-2022-40956)

    * Mozilla: Incoherent instruction cache when building WASM on ARM64 (CVE-2022-40957)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5238 advisory.

  - When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the     injected element's base instead.  (CVE-2022-40956)

  - Inconsistent data in instruction and data cache when creating wasm code could lead to a potentially     exploitable crash. This bug only affects Firefox on ARM64 platforms.  (CVE-2022-40957)

  - By injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a     secure context could set and thus overwrite cookies from a secure context, leading to session fixation and     other attacks.  (CVE-2022-40958)

  - During iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a     bypass that leaked device permissions into untrusted subdocuments.  (CVE-2022-40959)

  - Concurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a use-after-     free causing a potentially exploitable crash.  (CVE-2022-40960)

  - Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla     Fuzzing Team reported memory safety bugs present in Firefox 104 and Firefox ESR 102.2. Some of these bugs     showed evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code.  (CVE-2022-40962)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-6708 advisory.

    [102.3.0-3.0.1]
    - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

    [102.3.0-3]
    - Update to 102.3.0 build1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5649-1 advisory.

    Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service, bypass Content     Security Policy (CSP) or other security restrictions, conduct session fixation attacks, or execute     arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of firefox installed on the remote host is prior to 102.4.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2023-010 advisory.

    2023-09-27: CVE-2021-28429 was added to this advisory.

    Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2,     allows local attackers to cause a denial of service (DoS) via crafted .mov file. (CVE-2021-28429)

    A vulnerability was found in expat. With this flaw, it is possible to create a situation in which parsing     is suspended while substituting in an internal entity so that XML_ResumeParser directly uses the     internalEntityProcessor as its processor. If the subsequent parse includes some unclosed tags, this will     return without calling storeRawNames to ensure that the raw versions of the tag names are stored in memory     other than the parse buffer itself. Issues occur if the parse buffer is changed or reallocated (for     example, if processing a file line by line), problems occur. Using this vulnerability in the doContent     function allows an attacker to triage a denial of service or potentially arbitrary code execution.
    (CVE-2022-40674)

    A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that when     injecting an HTML base element; some requests would ignore the CSP's base-uri settings and accept the     injected element's base instead. (CVE-2022-40956)

    A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of inconsistent     data in the instruction and data cache when creating wasm code, which could lead to a potentially     exploitablecrash. (CVE-2022-40957)

    A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that by     injecting a cookie with certain special characters, an attacker on a shared subdomain, which is not a     secure context,could set and overwrite cookies from a secure context, leading to session fixation and     other attacks. (CVE-2022-40958)

    A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that certain     pages did not have their FeaturePolicy fully initialized during iframe navigation, leading to a bypass     that leaked device permissions into untrusted subdocuments. (CVE-2022-40959)

    A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that concurrent     use of the URL parser with non-UTF-8 data was not thread-safe, leading to a use-after-free problem and     causing a potentially exploitable crash. (CVE-2022-40960)

    A stack based buffer overflow vulnerability was identified in Mozilla Firefox and Firefox ESR. This     vulnerability occurs when the buffer being overwritten is allocated on the stack (i.e., is a local     variable or, rarely, a parameter to a function). An attacker could cause of denial-of-service style crash     by exploiting this vulnerability. To exploit this vulnerability, a remote, unauthenticated attacker would     need to convince a user to visit a specially crafted website or open a malicious document.
    (CVE-2022-40961)

    A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of Mozilla     developers Nika Layzell, Timothy Nikkel, Jeff Muizelaar, Sebastian Hengst, Andreas Pehrson, and the     Mozilla Fuzzing Team reporting memory safety bugs present in Firefox 104 and Firefox ESR 102.2. Some of     these bugs showed evidence of memory corruption and the presumption that with enough effort, some have     been exploited to run arbitrary code. (CVE-2022-40962)

    Mozilla: A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking     the result of a redirect, via performance.getEntries(). (CVE-2022-42927)

    Mozilla: Certain types of allocations were missing annotations that, if the Garbage Collector was in a     specific state, could have lead to memory corruption and a potentially exploitable crash. (CVE-2022-42928)

    A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a website     called window.print() causing a denial of service of the browser, which may persist beyond browser restart     depending on the user's session restore settings. (CVE-2022-42929)

    A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of Mozilla     developers Ashley Hale and the Mozilla Fuzzing Team, reporting memory safety bugs present in Firefox 105     and Firefox ESR 102.3. Some of these bugs showed evidence of memory corruption and, with enough effort,     exploited to run arbitrary code. (CVE-2022-42932)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-6711 advisory.

    - Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315
    - Added fix for mozbz#1348168/CVE-2017-5428

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Inconsistent data in instruction and data cache when creating wasm code could lead to a potentially     exploitable crash.<br>*This bug only affects Firefox on ARM64 platforms.*. This vulnerability affects     Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105. (CVE-2022-40957)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-4118:22 advisory.

    * Mozilla: Leaking of sensitive information when composing a response to an HTML email with a META refresh     tag (CVE-2022-3033)
      * Mozilla: Bypassing FeaturePolicy restrictions on transient pages (CVE-2022-40959)
      * Mozilla: Data-race when parsing non-UTF-8 URLs in threads (CVE-2022-40960)
      * Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3 (CVE-2022-40962)
      * Mozilla: Remote content specified in an HTML document that was nested inside an iframe's srcdoc     attribute was not blocked (CVE-2022-3032)
      * Mozilla: An iframe element in an HTML email could trigger a network request (CVE-2022-3034)
      * Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack (CVE-2022-36059)
      * Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix     (CVE-2022-40958)
      * Mozilla: Content-Security-Policy base-uri bypass (CVE-2022-40956)
      * Mozilla: Incoherent instruction cache when building WASM on ARM64 (CVE-2022-40957)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
165460	RHEL 9 : firefox (RHSA-2022:6700)	Nessus	Red Hat Local Security Checks	9/26/2022	11/7/2024	high
165471	RHEL 8 : firefox (RHSA-2022:6703)	Nessus	Red Hat Local Security Checks	9/26/2022	11/7/2024	high
165514	Debian DSA-5238-1 : thunderbird - security update	Nessus	Debian Local Security Checks	9/28/2022	1/4/2023	high
165518	Oracle Linux 8 : thunderbird (ELSA-2022-6708)	Nessus	Oracle Linux Local Security Checks	9/28/2022	10/22/2024	high
165601	Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5649-1)	Nessus	Ubuntu Local Security Checks	9/30/2022	8/27/2024	high
181940	Amazon Linux 2 : firefox (ALASFIREFOX-2023-010)	Nessus	Amazon Linux Local Security Checks	9/27/2023	12/11/2024	high
166563	Oracle Linux 7 : firefox (ELSA-2022-6711)	Nessus	Oracle Linux Local Security Checks	10/26/2022	10/22/2024	high
248044	Linux Distros Unpatched Vulnerability : CVE-2022-40957	Nessus	Misc.	8/11/2025	7/24/2026	medium
292278	MiracleLinux 9 : thunderbird-102.3.0-3.el9.ML.1 (AXSA:2022-4118:22)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

medium

high