The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7727:11 advisory.

    Mozilla: Denial of Service using HTTP/2 CONTINUATION frames (CVE-2024-3302)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1939 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.10.0.

    Security Fix(es):

    * Mozilla: Denial of Service using HTTP/2 CONTINUATION frames (CVE-2024-3302)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1935 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.10.0.

    Security Fix(es):

    * Mozilla: Denial of Service using HTTP/2 CONTINUATION frames (CVE-2024-3302)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2024:1912 advisory.

  - The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable     to clickjacking by malicious websites. This vulnerability affects Firefox < 124, Firefox ESR < 115.10, and     Thunderbird < 115.10. (CVE-2024-2609)

  - GetBoundName could return the wrong version of an object when JIT optimizations were applied. This     vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10. (CVE-2024-3852)

  - In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-     bounds-reads. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
    (CVE-2024-3854)

  - The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free     crashes during garbage collection. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and     Thunderbird < 115.10. (CVE-2024-3857)

  - On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could     be triggered by a malformed OpenType font. This vulnerability affects Firefox < 125, Firefox ESR < 115.10,     and Thunderbird < 115.10. (CVE-2024-3859)

  - If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect     reference count and later use-after-free. This vulnerability affects Firefox < 125, Firefox ESR < 115.10,     and Thunderbird < 115.10. (CVE-2024-3861)

  - Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed     evidence of memory corruption and we presume that with enough effort this could have been exploited to run     arbitrary code. This vulnerability affects Firefox < 125 and Firefox ESR < 115.10. (CVE-2024-3864)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7e71e9eaba advisory.

    - Updated to 124.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3790 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3790-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     April 19, 2024                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : firefox-esr     Version        : 115.10.0esr-1~deb10u1     CVE ID         : CVE-2024-2609 CVE-2024-3302 CVE-2024-3852 CVE-2024-3854                      CVE-2024-3857 CVE-2024-3859 CVE-2024-3861 CVE-2024-3864

    Multiple security issues have been found in the Mozilla Firefox web     browser, which could potentially result in the execution of arbitrary     code or clickjacking.

    For Debian 10 buster, these problems have been fixed in version     115.10.0esr-1~deb10u1.

    We recommend that you upgrade your firefox-esr packages.

    For the detailed security status of firefox-esr please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/firefox-esr

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3791 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3791-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     April 22, 2024                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : thunderbird     Version        : 1:115.10.1-1~deb10u1     CVE ID         : CVE-2024-2609 CVE-2024-3302 CVE-2024-3852 CVE-2024-3854                      CVE-2024-3857 CVE-2024-3859 CVE-2024-3861 CVE-2024-3864

    Multiple security issues were discovered in Thunderbird, which could     result in denial of service or the execution of arbitrary code.

    For Debian 10 buster, these problems have been fixed in version     1:115.10.1-1~deb10u1.

    We recommend that you upgrade your thunderbird packages.

    For the detailed security status of thunderbird please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/thunderbird

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 124.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-12 advisory.

  - Memory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory corruption and we     presume that with enough effort some of these could have been exploited to run arbitrary code.
    (CVE-2024-2615)

  - An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping     the sandbox. Note: This issue only affected Windows operating systems. Other operating systems are     unaffected. (CVE-2024-2605)

  - Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers     turning into pointer values. (CVE-2024-2606)

  - Return registers were overwritten which could have allowed an attacker to execute arbitrary code. Note:
    This issue only affected Armv7-A systems. Other operating systems are unaffected. (CVE-2024-2607)

  - <code>AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()</code> and     <code>AppendEncodedCharacters()</code> could have experienced integer overflows, causing underallocation     of an output buffer leading to an out of bounds write. (CVE-2024-2608)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1350-1 advisory.

  - The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable     to clickjacking by malicious websites. This vulnerability affects Firefox < 124, Firefox ESR < 115.10, and     Thunderbird < 115.10. (CVE-2024-2609)

  - There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could     abuse this to create an Out of Memory condition in the browser. This vulnerability affects Firefox < 125,     Firefox ESR < 115.10, and Thunderbird < 115.10. (CVE-2024-3302)

  - GetBoundName could return the wrong version of an object when JIT optimizations were applied. This     vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10. (CVE-2024-3852)

  - In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-     bounds-reads. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
    (CVE-2024-3854)

  - The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free     crashes during garbage collection. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and     Thunderbird < 115.10. (CVE-2024-3857)

  - On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could     be triggered by a malformed OpenType font. This vulnerability affects Firefox < 125, Firefox ESR < 115.10,     and Thunderbird < 115.10. (CVE-2024-3859)

  - If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect     reference count and later use-after-free. This vulnerability affects Firefox < 125, Firefox ESR < 115.10,     and Thunderbird < 115.10. (CVE-2024-3861)

  - The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only     affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects     Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10. (CVE-2024-3863)

  - Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed     evidence of memory corruption and we presume that with enough effort this could have been exploited to run     arbitrary code. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.
    (CVE-2024-3864)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1934 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.10.0.

    Security Fix(es):

    * Mozilla: Denial of Service using HTTP/2 CONTINUATION frames (CVE-2024-3302)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6750-1 advisory.

    Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially     crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of     service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute     arbitrary code. (CVE-2024-2609, CVE-2024-3852, CVE-2024-3864)

    Bartek Nowotarski discovered that Thunderbird did not properly limit HTTP/2 CONTINUATION frames. An     attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-3302)

    Lukas Bernhard discovered that Thunderbird did not properly manage memory during JIT optimisations,     leading to an out-of-bounds read vulnerability. An attacker could possibly use this issue to cause a     denial of service or expose sensitive information. (CVE-2024-3854)

    Lukas Bernhard discovered that Thunderbird did not properly manage memory when handling JIT created code     during garbage collection. An attacker could potentially exploit this issue to cause a denial of service,     or execute arbitrary code. (CVE-2024-3857)

    Ronald Crane discovered that Thunderbird did not properly manage memory in the OpenType sanitizer on     32-bit devices, leading to an out-of-bounds read vulnerability. An attacker could possibly use this issue     to cause a denial of service or expose sensitive information. (CVE-2024-3859)

    Ronald Crane discovered that Thunderbird did not properly manage memory when handling an AlignedBuffer. An     attacker could potentially exploit this issue to cause denial of service, or execute arbitrary code.
    (CVE-2024-3861)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0153 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-2609:
    The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable     to clickjacking by malicious websites. This vulnerability affects Firefox < 124, Firefox ESR < 115.10, and     Thunderbird < 115.10.

    CVE-2024-3302:
    There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could     abuse this to create an Out of Memory condition in the browser. This vulnerability affects Firefox < 125,     Firefox ESR < 115.10, and Thunderbird < 115.10.

    CVE-2024-3852:
    GetBoundName could return the wrong version of an object when JIT optimizations were applied. This     vulnerability affects Firefox < 125 and Firefox ESR < 115.10.

    CVE-2024-3854:
    In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-     bounds-reads. This vulnerability affects Firefox < 125 and Firefox ESR < 115.10.

    CVE-2024-3857:
    The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free     crashes during garbage collection. This vulnerability affects Firefox < 125 and Firefox ESR < 115.10.

    CVE-2024-3859:
    On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could     be triggered by a malformed OpenType font. This vulnerability affects Firefox < 125 and Firefox ESR <     115.10.

    CVE-2024-3861:
    If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect     reference count and later use-after-free. This vulnerability affects Firefox < 125 and Firefox ESR <     115.10.

    CVE-2024-3863:
    The executable file warning was not presented when downloading .xrm-ms files.
    *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This     vulnerability affects Firefox < 125 and Firefox ESR < 115.10.

    CVE-2024-3864:
    Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed     evidence of memory corruption and we presume that with enough effort this could have been exploited to run     arbitrary code. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1770-1 advisory.

    Update to version 115.11.0 ESR (bsc#1224056):

    - CVE-2024-4367: Arbitrary JavaScript execution in PDF.js
    - CVE-2024-4767: IndexedDB files retained in private browsing mode
    - CVE-2024-4768: Potential permissions request bypass via clickjacking
    - CVE-2024-4769: Cross-origin responses could be distinguished between script and non-script content-types
    - CVE-2024-4770: Use-after-free could occur when printing to PDF
    - CVE-2024-4777: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
292647	MiracleLinux 9 : thunderbird-115.10.0-2.el9_3.ML.1 (AXSA:2024-7727:11)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
193879	RHEL 8 : thunderbird (RHSA-2024:1939)	Nessus	Red Hat Local Security Checks	4/25/2024	4/2/2025	high
193882	RHEL 7 : thunderbird (RHSA-2024:1935)	Nessus	Red Hat Local Security Checks	4/25/2024	4/2/2025	high
193699	AlmaLinux 8 : firefox (ALSA-2024:1912)	Nessus	Alma Linux Local Security Checks	4/23/2024	4/2/2025	high
192295	Fedora 38 : firefox (2024-7e71e9eaba)	Nessus	Fedora Local Security Checks	3/20/2024	4/2/2025	critical
193569	Debian dla-3790 : firefox-esr - security update	Nessus	Debian Local Security Checks	4/19/2024	4/2/2025	high
193745	Debian dla-3791 : thunderbird - security update	Nessus	Debian Local Security Checks	4/23/2024	4/2/2025	high
192244	Mozilla Firefox < 124.0	Nessus	MacOS X Local Security Checks	3/19/2024	11/18/2025	critical
193652	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : MozillaFirefox (SUSE-SU-2024:1350-1)	Nessus	SuSE Local Security Checks	4/20/2024	4/2/2025	critical
193690	RHEL 8 : thunderbird (RHSA-2024:1934)	Nessus	Red Hat Local Security Checks	4/22/2024	4/2/2025	high
193869	Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : Thunderbird vulnerabilities (USN-6750-1)	Nessus	Ubuntu Local Security Checks	4/25/2024	4/2/2025	high
276320	TencentOS Server 4: firefox (TSSA-2024:0153)	Nessus	Tencent Local Security Checks	11/20/2025	11/20/2025	critical
197890	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : MozillaFirefox (SUSE-SU-2024:1770-1)	Nessus	SuSE Local Security Checks	5/24/2024	1/23/2025	critical

Detections

Analytics

Plugins Search

high

high

high

high

critical

high

high

critical

critical

high

high

critical

critical