CVE-2022-31736: Critical severity Mozilla Firefox vulnerability
A malicious website could have learned the size of a cross-origin resource that supported Range requests.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 101 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 101 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 91.10 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 101.0-r0 - Upgrade
Upgrade
alpine/firefox-esrto a version that resolves this vulnerability.Fixed in 91.10.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 101.0-r0 - Upgrade
Upgrade
alpine/thunderbirdto a version that resolves this vulnerability.Fixed in 91.10.0-r0 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 91.10.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:91.10.0-1 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 159.0.1-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 140.12.0esr-1~deb12u1Fixed in 153.6.0esr-1~deb12u2Fixed in 140.15.0esr-1~deb13u1Fixed in 153.6.0esr-1~deb13u1Fixed in 153.5.1esr-1Fixed in 153.6.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:140.12.0esr-1~deb12u1Fixed in 1:153.6.0esr-1~deb12u2Fixed in 1:140.12.0esr-1~deb13u1Fixed in 1:153.6.0esr-1~deb13u1Fixed in 1:153.5.0esr-1Fixed in 1:153.6.0esr-1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-31736?
The severity of CVE-2022-31736 is high with a severity value of 7.
How does CVE-2022-31736 impact Mozilla Firefox?
CVE-2022-31736 affects Mozilla Firefox versions up to exclusive version 101.
How does CVE-2022-31736 impact Mozilla Thunderbird?
CVE-2022-31736 affects Mozilla Thunderbird versions up to exclusive version 91.10.
How does CVE-2022-31736 impact Mozilla Firefox ESR?
CVE-2022-31736 affects Mozilla Firefox ESR versions up to exclusive version 91.10.
How can I fix CVE-2022-31736?
Upgrade Mozilla Firefox, Mozilla Thunderbird, or Mozilla Firefox ESR to versions higher than 101, 91.10 respectively.