VDB
SUSE-SU-2021%3A2774-1
SUSE-SU-2021%3A2774-1
PUBLISHED
CVSS 9.199999809265137 CRITICAL
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 78.13.0 ESR (MFSA 2021-34, bsc#1188891): - CVE-2021-29986: Race condition when resolving DNS names could have led to memory corruption - CVE-2021-29988: Memory corruption as a result of incorrect style treatment - CVE-2021-29984: Incorrect instruction reordering during JIT optimization - CVE-2021-29980: Uninitialized memory in a canvas object could have led to memory corruption - CVE-2021-29985: Use-after-free media channels - CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
Risk Scores
CVSS 4.0
9.199999809265137
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP3 | MozillaFirefox | 0, 0 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP2 | MozillaFirefox | 0, 0 |
Timeline
- Aug 19, 2021 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://www.suse.com/support/update/announcement/2021/suse-su-20212774-1/ advisory
- https://bugzilla.suse.com/1188891 report
- https://www.suse.com/security/cve/CVE-2021-29980 url
- https://www.suse.com/security/cve/CVE-2021-29984 url
- https://www.suse.com/security/cve/CVE-2021-29985 url
- https://www.suse.com/security/cve/CVE-2021-29986 url
- https://www.suse.com/security/cve/CVE-2021-29988 url
- https://www.suse.com/security/cve/CVE-2021-29989 url