CVE-2021-29948: Race Condition

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1692899
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-14/
• https://www.mozilla.org/security/advisories/mfsa2021-14/
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-14/#CVE-2021-29948
• https://security-tracker.debian.org/tracker/CVE-2021-29948

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2021-14

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-23994
• CVE-2021-23995
• CVE-2021-23998
• CVE-2021-23961
• CVE-2021-23999
• CVE-2021-24002
• CVE-2021-29945
• CVE-2021-29946
• CVE-2021-29948

Frequently Asked Questions

• What is the severity of CVE-2021-29948?

  CVE-2021-29948 has a moderate severity rating due to the potential for a race condition affecting signature verification.

• What vulnerable software is affected by CVE-2021-29948?

  CVE-2021-29948 affects Mozilla Thunderbird versions up to and including 78.10.

• How do I fix CVE-2021-29948?

  To fix CVE-2021-29948, upgrade Mozilla Thunderbird to a version later than 78.10.

• What type of vulnerability is CVE-2021-29948?

  CVE-2021-29948 is a race condition vulnerability related to signature file handling.

• Can CVE-2021-29948 be exploited by local attackers?

  Yes, CVE-2021-29948 can potentially be exploited by a malicious local process or user.