CVE-2023-4046

EPSS 0.3%
Veröffentlicht 01.08.2023 15:15:09
Zuletzt bearbeitet 21.11.2024 08:34:17
Quelle security@mozilla.org
CVE-Watchlists
Login
Unerledigt
Login

In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 116.0

Mozilla ≫ Firefox Version >= 102.0 < 102.14

Mozilla ≫ Firefox Version >= 115.0 < 115.1

Debian ≫ Debian Linux Version11.0

Debian ≫ Debian Linux Version12.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.3%	0.525

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

https://lists.debian.org/debian-lts-announce/2023/08/msg00008.html

https://lists.debian.org/debian-lts-announce/2023/08/msg00010.html

https://www.debian.org/security/2023/dsa-5464

Third Party Advisory

https://www.debian.org/security/2023/dsa-5469

Third Party Advisory

https://www.mozilla.org/security/advisories/mfsa2023-29/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2023-30/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2023-31/

Vendor Advisory