Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2024.0092
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2024-0092)
Zusammenfassung:	The remote host is missing an update for the 'firefox, firefox-l10n, nss' package(s) announced via the MGASA-2024-0092 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'firefox, firefox-l10n, nss' package(s) announced via the MGASA-2024-0092 advisory. Vulnerability Insight: Crash in NSS TLS method. (CVE-2024-0743) JIT code failed to save return registers on Armv7-A. (CVE-2024-2607) Integer overflow could have led to out of bounds write. (CVE-2024-2608) Improve handling of out-of-memory conditions in ICU. (CVE-2024-2616) NSS susceptible to timing attack against RSA decryption. (CVE-2023-5388) Improper handling of html and body tags enabled CSP nonce leakage. (CVE-2024-2610) Clickjacking vulnerability could have led to a user accidentally granting permissions. (CVE-2024-2611) Self referencing object could have potentially led to a use-after-free. (CVE-2024-2612) Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. (CVE-2024-2614) Privileged JavaScript Execution via Event Handlers.(CVE-2024-29944) Affected Software/OS: 'firefox, firefox-l10n, nss' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2023-5388 https://bugzilla.mozilla.org/show_bug.cgi?id=1780432 https://www.mozilla.org/security/advisories/mfsa2024-12/ https://www.mozilla.org/security/advisories/mfsa2024-13/ https://www.mozilla.org/security/advisories/mfsa2024-14/ https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html Common Vulnerability Exposure (CVE) ID: CVE-2024-0743 https://bugzilla.mozilla.org/show_bug.cgi?id=1867408 https://lists.debian.org/debian-lts-announce/2024/03/msg00010.html https://www.mozilla.org/security/advisories/mfsa2024-01/ Common Vulnerability Exposure (CVE) ID: CVE-2024-2607 https://bugzilla.mozilla.org/show_bug.cgi?id=1879939 Common Vulnerability Exposure (CVE) ID: CVE-2024-2608 https://bugzilla.mozilla.org/show_bug.cgi?id=1880692 Common Vulnerability Exposure (CVE) ID: CVE-2024-2610 https://bugzilla.mozilla.org/show_bug.cgi?id=1871112 Common Vulnerability Exposure (CVE) ID: CVE-2024-2611 https://bugzilla.mozilla.org/show_bug.cgi?id=1876675 Common Vulnerability Exposure (CVE) ID: CVE-2024-2612 https://bugzilla.mozilla.org/show_bug.cgi?id=1879444 Common Vulnerability Exposure (CVE) ID: CVE-2024-2614 Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1685358%2C1861016%2C1880405%2C1881093 Common Vulnerability Exposure (CVE) ID: CVE-2024-2616 https://bugzilla.mozilla.org/show_bug.cgi?id=1846197 Common Vulnerability Exposure (CVE) ID: CVE-2024-29944 https://bugzilla.mozilla.org/show_bug.cgi?id=1886852 https://www.mozilla.org/security/advisories/mfsa2024-15/ https://www.mozilla.org/security/advisories/mfsa2024-16/ http://www.openwall.com/lists/oss-security/2024/03/23/1
Copyright	Copyright (C) 2024 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.