VDB
CVE-2022-46873
CVE-2022-46873
PUBLISHED
CVSS 8.699999809265137 HIGH
In Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen zählen Fehler in der Speicherverwaltung und Programmierfehler, sowie Schwachstellen in genutzten Komponenten von Drittanbietern. Ein Angreifer kann dadurch beliebigen Code ausführen, den Benutzer täuschen, Informationen offenlegen, einen Denial of Service Zustand herbeiführen und nicht näher beschriebene Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich. Einige dieser Schwachstellen betreffen nur die Linux oder MacOS Varianten der betroffenen Produkte.
EPSS 0.90% · 76.0th percentile
Risk Scores
CVSS v4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.90%
76.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SUSE | SUSE Linux | |
| Debian | Debian Linux | |
| Gentoo | Gentoo Linux | |
| Open Source | Open Source CentOS | |
| Red Hat | Red Hat Enterprise Linux | |
| IGEL | IGEL OS < 11.08.290 | |
| Amazon | Amazon Linux 2 | |
| Mozilla | Mozilla Thunderbird < 102.6.1 | |
| Xerox | Xerox FreeFlow Print Server v2 | |
| Ubuntu | Ubuntu Linux | |
| Oracle | Oracle Linux |
Timeline
- Dec 13, 2022 CVE Published
- Dec 23, 2022 EPSS Score
- Feb 2, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 16, 2023 EPSS Score
- Apr 26, 2023 EPSS Score
- Jul 18, 2023 EPSS Score
- Aug 29, 2023 EPSS Score
- Oct 9, 2023 EPSS Score
- Nov 20, 2023 EPSS Score
- Dec 31, 2023 EPSS Score
- Feb 10, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-2319.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2319 advisory
- https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-008.html advisory
- https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-013.html advisory
- https://security.gentoo.org/glsa/202305-13 advisory
- https://kb.igel.com/securitysafety/en/isn-2023-02-firefox-esr-vulnerabilities-81501314.html advisory
- https://security.business.xerox.com/wp-content/uploads/2023/03/Xerox-Security-Bulletin-XRX23-002-FreeFlow-Print-Server-v2_Windows10.pdf advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2022-51/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2022-52/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2022-53/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-December/013227.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-December/013230.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-December/013229.html advisory
- https://lists.debian.org/debian-security-announce/2022/msg00272.html advisory
- https://ubuntu.com/security/notices/USN-5782-1 advisory
- http://linux.oracle.com/errata/ELSA-2022-9079-1.html advisory
- https://access.redhat.com/errata/RHSA-2022:9066 advisory
- https://access.redhat.com/errata/RHSA-2022:9067 advisory
- https://access.redhat.com/errata/RHSA-2022:9068 advisory
- https://access.redhat.com/errata/RHSA-2022:9065 advisory
…and 61 more