CVE-2021-23978
Summary
| CVE | CVE-2021-23978 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-02-26 16:15:00 UTC |
|---|
| Updated | 2022-05-27 18:30:00 UTC |
|---|
| Description | Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Mozilla Firefox: Multiple vulnerabilities (GLSA 202104-10) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| Debian -- Security Information -- DSA-4866-1 thunderbird |
DEBIAN |
www.debian.org |
Third Party Advisory |
| Mozilla Thunderbird: Multiple vulnerabilities (GLSA 202104-09) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| Security Vulnerabilities fixed in Firefox 86 — Mozilla |
MISC |
www.mozilla.org |
Release Notes, Vendor Advisory |
| Security Vulnerabilities fixed in Firefox ESR 78.8 — Mozilla |
MISC |
www.mozilla.org |
Release Notes, Vendor Advisory |
| Security Vulnerabilities fixed in Thunderbird 78.8 — Mozilla |
MISC |
www.mozilla.org |
Release Notes, Vendor Advisory |
| Bug List |
MISC |
bugzilla.mozilla.org |
Broken Link, Issue Tracking, Vendor Advisory |
| [SECURITY] [DLA 2578-1] thunderbird security update |
MLIST |
lists.debian.org |
Mailing List, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 179542 Debian Security Update for firefox-esrthunderbird (CVE-2021-23978)
- 198355 Ubuntu Security Notification for Thunderbird vulnerabilities (USN-4936-1)
- 296069 Oracle Solaris 11.4 Support Repository Update (SRU) 31.88.5 Missing (CPUJAN2021)
- 352250 Amazon Linux Security Advisory for thunderbird: ALAS2-2021-1618
- 375430 SeaMonkey Multiple Vulnerabilities
- 500941 Alpine Linux Security Update for firefox-esr
- 501555 Alpine Linux Security Update for firefox
- 501624 Alpine Linux Security Update for mozjs78
- 502379 Alpine Linux Security Update for thunderbird
- 503846 Alpine Linux Security Update for firefox
- 710019 Gentoo Linux Mozilla Thunderbird Multiple Vulnerabilities (GLSA 202104-09)
- 710020 Gentoo Linux Mozilla Firefox Multiple Vulnerabilities (GLSA 202104-10)
- 750329 OpenSUSE Security Update for MozillaThunderbird (openSUSE-SU-2021:0387-1)
- 750336 OpenSUSE Security Update for MozillaFirefox (openSUSE-SU-2021:0373-1)
- 940157 AlmaLinux Security Update for thunderbird (ALSA-2021:0657)
- 940358 AlmaLinux Security Update for firefox (ALSA-2021:0655)
