ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2023.0111
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2023-0111)
Resumen:	The remote host is missing an update for the 'firefox, firefox-l10n, nss' package(s) announced via the MGASA-2023-0111 advisory.
Descripción:	Summary: The remote host is missing an update for the 'firefox, firefox-l10n, nss' package(s) announced via the MGASA-2023-0111 advisory. Vulnerability Insight: Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash (CVE-2023-25751). When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable (CVE-2023-25752). While implementing on AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have lead to a potentially exploitable crash (CVE-2023-28162). Dragging a URL from a cross-origin iframe that was removed during the drag could have lead to user confusion and website spoofing attacks (CVE-2023-28164). Mozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code (CVE-2023-28176). Affected Software/OS: 'firefox, firefox-l10n, nss' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-25751 https://bugzilla.mozilla.org/show_bug.cgi?id=1814899 https://www.mozilla.org/security/advisories/mfsa2023-09/ https://www.mozilla.org/security/advisories/mfsa2023-10/ https://www.mozilla.org/security/advisories/mfsa2023-11/ Common Vulnerability Exposure (CVE) ID: CVE-2023-25752 https://bugzilla.mozilla.org/show_bug.cgi?id=1811627 Common Vulnerability Exposure (CVE) ID: CVE-2023-28162 https://bugzilla.mozilla.org/show_bug.cgi?id=1811327 Common Vulnerability Exposure (CVE) ID: CVE-2023-28164 https://bugzilla.mozilla.org/show_bug.cgi?id=1809122 Common Vulnerability Exposure (CVE) ID: CVE-2023-28176 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1808352%2C1811637%2C1815904%2C1817442%2C1818674
Copyright	Copyright (C) 2023 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.