VDB
CVE-2022-46879
CVE-2022-46879
PUBLISHED
CVSS 8.699999809265137 HIGH
In Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird existieren mehrere Schwachstellen. Zu den Ursachen zählen Fehler in der Speicherverwaltung und Programmierfehler, sowie Schwachstellen in genutzten Komponenten von Drittanbietern. Ein Angreifer kann dadurch beliebigen Code ausführen, den Benutzer täuschen, Informationen offenlegen, einen Denial of Service Zustand herbeiführen und nicht näher beschriebene Auswirkungen erzielen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich. Einige dieser Schwachstellen betreffen nur die Linux oder MacOS Varianten der betroffenen Produkte.
EPSS 0.53% · 67.5th percentile
Risk Scores
CVSS v4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.53%
67.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SUSE | SUSE Linux | |
| Gentoo | Gentoo Linux | |
| Amazon | Amazon Linux 2 | |
| Mozilla | Mozilla Thunderbird < 102.6.1 | |
| Debian | Debian Linux | |
| Xerox | Xerox FreeFlow Print Server v2 | |
| Red Hat | Red Hat Enterprise Linux | |
| Ubuntu | Ubuntu Linux | |
| IGEL | IGEL OS < 11.08.290 | |
| Oracle | Oracle Linux | |
| Open Source | Open Source CentOS |
Timeline
- Dec 13, 2022 CVE Published
- Dec 23, 2022 EPSS Score
- Feb 2, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 16, 2023 EPSS Score
- Apr 26, 2023 EPSS Score
- Jun 7, 2023 EPSS Score
- Jul 18, 2023 EPSS Score
- Aug 29, 2023 EPSS Score
- Oct 9, 2023 EPSS Score
- Nov 20, 2023 EPSS Score
- Dec 31, 2023 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-2319.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2319 advisory
- https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-008.html advisory
- https://alas.aws.amazon.com/AL2/ALASFIREFOX-2023-013.html advisory
- https://security.gentoo.org/glsa/202305-13 advisory
- https://kb.igel.com/securitysafety/en/isn-2023-02-firefox-esr-vulnerabilities-81501314.html advisory
- https://security.business.xerox.com/wp-content/uploads/2023/03/Xerox-Security-Bulletin-XRX23-002-FreeFlow-Print-Server-v2_Windows10.pdf advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2022-51/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2022-52/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2022-53/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-December/013227.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-December/013230.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-December/013229.html advisory
- https://lists.debian.org/debian-security-announce/2022/msg00272.html advisory
- https://ubuntu.com/security/notices/USN-5782-1 advisory
- http://linux.oracle.com/errata/ELSA-2022-9079-1.html advisory
- https://access.redhat.com/errata/RHSA-2022:9066 advisory
- https://access.redhat.com/errata/RHSA-2022:9067 advisory
- https://access.redhat.com/errata/RHSA-2022:9068 advisory
- https://access.redhat.com/errata/RHSA-2022:9065 advisory
…and 61 more