CVE-2021-23982: Weak Encryption

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1677046
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-12/
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-10/
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/
• https://www.mozilla.org/security/advisories/mfsa2021-10/
• https://www.mozilla.org/security/advisories/mfsa2021-11/
• https://www.mozilla.org/security/advisories/mfsa2021-12/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2021-12
• MFSA2021-10
• MFSA2021-11

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-23981
• CVE-2021-4127
• CVE-2021-23982
• CVE-2021-23984
• CVE-2021-23987
• CVE-2021-29955
• CVE-2021-29951
• CVE-2021-23983
• CVE-2021-23985
• CVE-2021-23986
• CVE-2021-23988

Frequently Asked Questions

• What is the severity of CVE-2021-23982?

  CVE-2021-23982 is rated as a high-severity vulnerability due to its potential to expose internal network information.

• How do I fix CVE-2021-23982?

  To fix CVE-2021-23982, update your Mozilla Firefox, Firefox ESR, or Thunderbird to the latest available version that is above the specified vulnerable versions.

• Which versions are affected by CVE-2021-23982?

  CVE-2021-23982 affects Mozilla Thunderbird versions up to and including 78.9, Firefox versions up to and including 87, and Firefox ESR versions up to and including 78.9.

• What types of attacks can exploit CVE-2021-23982?

  CVE-2021-23982 can be exploited by a malicious webpage utilizing WebRTC connections to scan for internal network hosts and local machine services.

• Is CVE-2021-23982 a client-side or server-side vulnerability?

  CVE-2021-23982 is primarily a client-side vulnerability affecting web browsers and email clients.