VDB
CVE-2023-5731
CVE-2023-5731
PUBLISHED
Es besteht eine Schwachstelle in Mozilla Firefox. Dieser Fehler besteht aufgrund eines Pufferüberlaufs. Ein entfernter Angreifer kann diese Schwachstelle zur Ausführung von beliebigem Code ausnutzen. Für eine erfolgreiche Nutzung ist die Interaktion des Benutzers erforderlich.
EPSS 0.41% · 61.4th percentile
Risk Scores
EPSS Score
0.41%
61.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux | |
| SUSE | SUSE openSUSE | |
| Xerox | Xerox FreeFlow Print Server v7 | |
| Debian | Debian Linux | |
| Ubuntu | Ubuntu Linux | |
| Mozilla | Mozilla Firefox <119 | |
| SUSE | SUSE Linux | |
| Amazon | Amazon Linux 2 | |
| IGEL | IGEL OS | |
| Gentoo | Gentoo Linux | |
| Oracle | Oracle Linux | |
| Xerox | Xerox FreeFlow Print Server v2 / Windows 10 | |
| Xerox | Xerox FreeFlow Print Server v9 | |
| Fedora | Fedora Linux |
Exploit Intelligence
- CIRCL seen: CVE-2023-5731 (circl-sighting)
- Memory safety bugs fixed in Firefox 119 (circl)
- https://www.mozilla.org/security/advisories/mfsa2023-45/ (circl)
- https://security.gentoo.org/glsa/202401-10 (circl)
Timeline
- Oct 24, 2023 CVE Published
- Oct 25, 2023 EPSS Score
- Oct 25, 2023 PoC Published
- Nov 25, 2023 EPSS Score
- Dec 26, 2023 EPSS Score
- Jan 26, 2024 EPSS Score
- Feb 26, 2024 EPSS Score
- Mar 28, 2024 EPSS Score
- Apr 28, 2024 EPSS Score
- May 29, 2024 EPSS Score
- Jul 29, 2024 EPSS Score
- Aug 29, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2743.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2743 advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-45/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-46/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-47/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-48/ advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-126cffa741 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-253212d414 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-107939d153 advisory
- https://lists.suse.com/pipermail/sle-security-updates/2023-October/016854.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2023-October/016855.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2023-October/016853.html advisory
- https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html advisory
- https://ubuntu.com/security/notices/USN-6456-1 advisory
- https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html advisory
- https://lists.debian.org/debian-security-announce/2023/msg00234.html advisory
- https://access.redhat.com/errata/RHSA-2023:6195 advisory
- https://linux.oracle.com/errata/ELSA-2023-6162.html advisory
- https://access.redhat.com/errata/RHSA-2023:6188 advisory
- https://access.redhat.com/errata/RHSA-2023:6191 advisory
…and 31 more