Test ID:	1.3.6.1.4.1.25623.1.1.10.2023.0111
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2023-0111)
Summary:	The remote host is missing an update for the 'firefox, firefox-l10n, nss' package(s) announced via the MGASA-2023-0111 advisory.
Description:	Summary: The remote host is missing an update for the 'firefox, firefox-l10n, nss' package(s) announced via the MGASA-2023-0111 advisory. Vulnerability Insight: Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash (CVE-2023-25751). When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable (CVE-2023-25752). While implementing on AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have lead to a potentially exploitable crash (CVE-2023-28162). Dragging a URL from a cross-origin iframe that was removed during the drag could have lead to user confusion and website spoofing attacks (CVE-2023-28164). Mozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code (CVE-2023-28176). Affected Software/OS: 'firefox, firefox-l10n, nss' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-25751 https://bugzilla.mozilla.org/show_bug.cgi?id=1814899 https://www.mozilla.org/security/advisories/mfsa2023-09/ https://www.mozilla.org/security/advisories/mfsa2023-10/ https://www.mozilla.org/security/advisories/mfsa2023-11/ Common Vulnerability Exposure (CVE) ID: CVE-2023-25752 https://bugzilla.mozilla.org/show_bug.cgi?id=1811627 Common Vulnerability Exposure (CVE) ID: CVE-2023-28162 https://bugzilla.mozilla.org/show_bug.cgi?id=1811327 Common Vulnerability Exposure (CVE) ID: CVE-2023-28164 https://bugzilla.mozilla.org/show_bug.cgi?id=1809122 Common Vulnerability Exposure (CVE) ID: CVE-2023-28176 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1808352%2C1811637%2C1815904%2C1817442%2C1818674
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.