CVE-2022-29916
Summary
| CVE | CVE-2022-29916 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-12-22 20:15:00 UTC |
| Updated | 2022-12-30 22:13:00 UTC |
| Description | Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. This could have been used to probe the browser history. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mozilla | Firefox | All | All | All | All |
| Application | Mozilla | Firefox Esr | All | All | All | All |
| Application | Mozilla | Thunderbird | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Vulnerabilities fixed in Thunderbird 91.9 — Mozilla | MISC | www.mozilla.org | |
| Access Denied | MISC | bugzilla.mozilla.org | |
| Security Vulnerabilities fixed in Firefox ESR 91.9 — Mozilla | MISC | www.mozilla.org | |
| Security Vulnerabilities fixed in Firefox 100 — Mozilla | MISC | www.mozilla.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159778 Oracle Enterprise Linux Security Update for firefox (ELSA-2022-1703)
- 159779 Oracle Enterprise Linux Security Update for firefox (ELSA-2022-1705)
- 159780 Oracle Enterprise Linux Security Update for thunderbird (ELSA-2022-1730)
- 159781 Oracle Enterprise Linux Security Update for thunderbird (ELSA-2022-1725)
- 159923 Oracle Enterprise Linux Security Update for firefox (ELSA-2022-4590)
- 159940 Oracle Enterprise Linux Security Update for thunderbird (ELSA-2022-4589)
- 179263 Debian Security Update for firefox-esr (DSA 5129-1)
- 179266 Debian Security Update for firefox-esr (DLA 2994-1)
- 179299 Debian Security Update for thunderbird (DSA 5141-1)
- 179309 Debian Security Update for thunderbird (DLA 3020-1)
- 182169 Debian Security Update for firefox-esrthunderbird (CVE-2022-29916)
- 198781 Ubuntu Security Notification for Firefox Vulnerabilities (USN-5411-1)
- 240261 Red Hat Update for firefox (RHSA-2022:1705)
- 240262 Red Hat Update for firefox (RHSA-2022:1704)
- 240263 Red Hat Update for firefox (RHSA-2022:1703)
- 240266 Red Hat Update for thunderbird (RHSA-2022:1724)
- 240267 Red Hat Update for thunderbird (RHSA-2022:1726)
- 240268 Red Hat Update for thunderbird (RHSA-2022:1730)
- 240269 Red Hat Update for thunderbird (RHSA-2022:1725)
- 240270 Red Hat Update for firefox (RHSA-2022:1702)
- 240347 Red Hat Update for thunderbird (RHSA-2022:4589)
- 240351 Red Hat Update for firefox (RHSA-2022:4590)
- 240430 Red Hat Update for firefox (RHSA-2022:1701)
- 257165 CentOS Security Update for thunderbird (CESA-2022:1725)
- 257166 CentOS Security Update for firefox (CESA-2022:1703)
- 296064 Oracle Solaris 11.4 Support Repository Update (SRU) 46.119.2 Missing (CPUAPR2022)
- 376573 Mozilla Firefox ESR Multiple Vulnerabilities (MFSA2022-17)
- 376574 Mozilla Firefox Multiple Vulnerabilities (MFSA2022-16)
- 376578 Mozilla Thunderbird Multiple Vulnerabilities (MFSA2022-18)
- 502077 Alpine Linux Security Update for firefox-esr
- 502389 Alpine Linux Security Update for thunderbird
- 502684 Alpine Linux Security Update for firefox
- 504820 Alpine Linux Security Update for firefox-esr
- 504822 Alpine Linux Security Update for firefox
- 505456 Alpine Linux Security Update for thunderbird
- 710582 Gentoo Linux Mozilla Firefox Multiple Vulnerabilities (GLSA 202208-08)
- 710585 Gentoo Linux Mozilla Thunderbird Multiple Vulnerabilities (GLSA 202208-14)
- 752144 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2022:1731-1)
- 752150 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2022:1748-1)
- 752152 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2022:1757-1)
- 753190 SUSE Enterprise Linux Security Update for MozillaThunderbird (SUSE-SU-2022:1719-1)
- 940491 AlmaLinux Security Update for firefox (ALSA-2022:1705)
- 940492 AlmaLinux Security Update for thunderbird (ALSA-2022:1730)
- 960430 Rocky Linux Security Update for firefox (RLSA-2022:1705)