The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3275 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3275-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     January 19, 2023                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : firefox-esr     Version        : 102.7.0esr-1~deb10u1     CVE ID         : CVE-2022-46871 CVE-2022-46877 CVE-2023-23598 CVE-2023-23601                      CVE-2023-23602 CVE-2023-23603 CVE-2023-23605

    Multiple security issues have been found in the Mozilla Firefox web     browser, which could potentially result in the execution of arbitrary     code, information disclosure or spoofing.

    For Debian 10 buster, these problems have been fixed in version     102.7.0esr-1~deb10u1.

    We recommend that you upgrade your firefox-esr packages.

    For the detailed security status of firefox-esr please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/firefox-esr

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0113-1 advisory.

  - An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited. This     vulnerability affects Firefox < 108. (CVE-2022-46871)

  - By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in     potential user confusion or spoofing attacks. This vulnerability affects Firefox < 108. (CVE-2022-46877)

  - Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain     MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to     <code>DataTransfer.setData</code>. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and     Firefox ESR < 102.7. (CVE-2023-23598)

  - Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which     could lead to website spoofing attacks. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and     Firefox ESR < 102.7. (CVE-2023-23601)

  - A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy     connect-src header to be ignored. This could lead to connections to restricted origins from inside     WebWorkers. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7.
    (CVE-2023-23602)

  - Regular expressions used to filter out forbidden properties and values from style directives in calls to     <code>console.log</code> weren't accounting for external URLs. Data could then be potentially exfiltrated     from the browser. This vulnerability affects Firefox < 109, Thunderbird < 102.7, and Firefox ESR < 102.7.
    (CVE-2023-23603)

  - Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and     Firefox ESR 102.6. Some of these bugs showed evidence of memory corruption and we presume that with enough     effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox <     109, Thunderbird < 102.7, and Firefox ESR < 102.7. (CVE-2023-23605)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5816-1 advisory.

    Niklas Baumstark discovered that a compromised web child process of Firefox could disable web security     opening restrictions, leading to a new child process being spawned within the file:// context. An attacker     could potentially exploits this to obtain sensitive information. (CVE-2023-23597)

    Tom Schuster discovered that Firefox was not performing a validation check on GTK drag data. An attacker     could potentially exploits this to obtain sensitive information. (CVE-2023-23598)

    Vadim discovered that Firefox was not properly sanitizing a curl command output when copying a network     request from the developer tools panel. An attacker could potentially exploits this to hide and execute     arbitrary commands. (CVE-2023-23599)

    Luan Herrera discovered that Firefox was not stopping navigation when dragging a URL from a cross-origin     iframe into the same tab. An attacker potentially exploits this to spoof the user. (CVE-2023-23601)

    Dave Vandyke discovered that Firefox did not properly implement CSP policy when creating a WebSocket in a     WebWorker. An attacker who was able to inject markup into a page otherwise protected by a Content Security     Policy may have been able to inject an executable script. (CVE-2023-23602)

    Dan Veditz discovered that Firefox did not properly implement CSP policy on regular expression when using     console.log. An attacker potentially exploits this to exfiltrate data from the browser. (CVE-2023-23603)

    Nika Layzell discovered that Firefox was not performing a validation check when parsing a non-system html     document via DOMParser::ParseFromSafeString. An attacker potentially exploits this to bypass web security     checks. (CVE-2023-23604)

    Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service, obtain     sensitive information across domains, or execute arbitrary code. (CVE-2023-23605, CVE-2023-23606)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0296 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.7.0 ESR.

    Security Fix(es):

    * Mozilla: libusrsctp library out of date (CVE-2022-46871)

    * Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598)

    * Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605)

    * Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599)

    * Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601)

    * Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers     (CVE-2023-23602)

    * Mozilla: Fullscreen notification bypass (CVE-2022-46877)

    * Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive     (CVE-2023-23603)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0286 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.7.0 ESR.

    Security Fix(es):

    * Mozilla: libusrsctp library out of date (CVE-2022-46871)

    * Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598)

    * Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605)

    * Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599)

    * Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601)

    * Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers     (CVE-2023-23602)

    * Mozilla: Fullscreen notification bypass (CVE-2022-46877)

    * Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive     (CVE-2023-23603)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0290 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.7.0 ESR.

    Security Fix(es):

    * Mozilla: libusrsctp library out of date (CVE-2022-46871)

    * Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598)

    * Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605)

    * Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599)

    * Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601)

    * Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers     (CVE-2023-23602)

    * Mozilla: Fullscreen notification bypass (CVE-2022-46877)

    * Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive     (CVE-2023-23603)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-0285 advisory.

    [102.7.0-1.0.1]
    - Updated homepages to use https [Orabug: 34648274]

    [102.7.0-1]
    - Update to 102.7.0 build1

    [102.6.0-2]
    - Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the mozjs package has been released.

ID	Name	Product	Family	Published	Updated	Severity
170183	Debian dla-3275 : firefox-esr - security update	Nessus	Debian Local Security Checks	1/19/2023	1/22/2025	high
170252	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : MozillaFirefox (SUSE-SU-2023:0113-1)	Nessus	SuSE Local Security Checks	1/21/2023	10/24/2023	high
170280	Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5816-1)	Nessus	Ubuntu Local Security Checks	1/23/2023	8/29/2024	high
170282	RHEL 7 : firefox (RHSA-2023:0296)	Nessus	Red Hat Local Security Checks	1/23/2023	11/7/2024	high
170390	RHEL 9 : firefox (RHSA-2023:0286)	Nessus	Red Hat Local Security Checks	1/23/2023	11/7/2024	high
170411	RHEL 8 : firefox (RHSA-2023:0290)	Nessus	Red Hat Local Security Checks	1/23/2023	11/7/2024	high
170510	Oracle Linux 9 : firefox (ELSA-2023-0285)	Nessus	Oracle Linux Local Security Checks	1/24/2023	10/22/2024	high
204437	Photon OS 5.0: Mozjs PHSA-2023-5.0-0035	Nessus	PhotonOS Local Security Checks	7/24/2024	7/24/2024	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

critical