The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:5433 advisory.

  - During the worker lifecycle, a use-after-free condition could have occured, which could have led to a     potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and     Thunderbird < 115.0.1. (CVE-2023-3600)

  - A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-     of-bounds write, leading to a potentially exploitable crash in a privileged process. This vulnerability     affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3. (CVE-2023-5169)

  - During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing     an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects     Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3. (CVE-2023-5171)

  - Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs     showed evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and     Thunderbird < 115.3. (CVE-2023-5176)

  - Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1     allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium     security severity: High) (CVE-2023-5217)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6404-1 advisory.

    Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service, obtain     sensitive information across domains, or execute arbitrary code. (CVE-2023-5169, CVE-2023-5170,     CVE-2023-5171, CVE-2023-5172, CVE-2023-5175, CVE-2023-5176)

    Ronald Crane discovered that Firefox did not properly manage memory when non-HTTPS Alternate Services     (network.http.altsvc.oe) is enabled. An attacker could potentially exploit this issue to cause a denial of     service. (CVE-2023-5173)

    Clment Lecigne discovered that Firefox did not properly manage memory when handling VP8 media stream. An     attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process,     resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-5217)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5439 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.3.1.

    Security Fix(es):

    * firefox: use-after-free in workers (CVE-2023-3600)

    * Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169)

    * Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171)

    * Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3     (CVE-2023-5176)

    * libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5430 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.3.1.

    Security Fix(es):

    * firefox: use-after-free in workers (CVE-2023-3600)

    * Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169)

    * Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171)

    * Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3     (CVE-2023-5176)

    * libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:5435 advisory.

  - During the worker lifecycle, a use-after-free condition could have occured, which could have led to a     potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and     Thunderbird < 115.0.1. (CVE-2023-3600)

  - A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-     of-bounds write, leading to a potentially exploitable crash in a privileged process. This vulnerability     affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3. (CVE-2023-5169)

  - During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing     an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects     Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3. (CVE-2023-5171)

  - Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs     showed evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and     Thunderbird < 115.3. (CVE-2023-5176)

  - Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1     allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium     security severity: High) (CVE-2023-5217)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2023:5435 advisory.

  - During the worker lifecycle, a use-after-free condition could have occured, which could have led to a     potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and     Thunderbird < 115.0.1. (CVE-2023-3600)

  - A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-     of-bounds write, leading to a potentially exploitable crash in a privileged process. This vulnerability     affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3. (CVE-2023-5169)

  - During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing     an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects     Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3. (CVE-2023-5171)

  - Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs     showed evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and     Thunderbird < 115.3. (CVE-2023-5176)

  - Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1     allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium     security severity: High) (CVE-2023-5217)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
190211	CentOS 8 : firefox (CESA-2023:5433)	Nessus	CentOS Local Security Checks	2/8/2024	2/8/2024	critical
182431	Ubuntu 20.04 LTS : Firefox vulnerabilities (USN-6404-1)	Nessus	Ubuntu Local Security Checks	10/3/2023	8/27/2024	critical
182540	RHEL 9 : thunderbird (RHSA-2023:5439)	Nessus	Red Hat Local Security Checks	10/4/2023	11/7/2024	critical
182553	RHEL 8 : thunderbird (RHSA-2023:5430)	Nessus	Red Hat Local Security Checks	10/4/2023	11/7/2024	critical
182617	Rocky Linux 9 : thunderbird (RLSA-2023:5435)	Nessus	Rocky Linux Local Security Checks	10/5/2023	11/1/2023	critical
182692	AlmaLinux 9 : thunderbird (ALSA-2023:5435)	Nessus	Alma Linux Local Security Checks	10/6/2023	11/1/2023	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical