CVE-2023-0547

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1811298
• https://www.mozilla.org/security/advisories/mfsa2023-15/
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-15/
• https://launchpad.net/bugs/cve/CVE-2023-0547
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-15/#CVE-2023-1999
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-15/#CVE-2023-0547
• https://security-tracker.debian.org/tracker/CVE-2023-0547
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547
• https://nvd.nist.gov/vuln/detail/CVE-2023-0547
• https://ubuntu.com/security/CVE-2023-0547

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2023-15

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-29531
• CVE-2023-29532
• CVE-2023-29533
• CVE-2023-1999
• CVE-2023-29535
• CVE-2023-29536
• CVE-2023-0547
• CVE-2023-29479
• CVE-2023-29539
• CVE-2023-29541
• CVE-2023-29542
• CVE-2023-29545
• CVE-2023-1945
• CVE-2023-29548
• CVE-2023-29550

Frequently Asked Questions

• What is the vulnerability ID of this issue?

  The vulnerability ID of this issue is CVE-2023-0547.

• Which software is affected by this vulnerability?

  Thunderbird versions from 68 to 102.9.1 are affected by this vulnerability.

• What is the severity of CVE-2023-0547?

  The severity of CVE-2023-0547 is high with a severity value of 7.

• How does CVE-2023-0547 affect Thunderbird?

  CVE-2023-0547 affects Thunderbird by not checking the OCSP revocation status of recipient certificates when sending S/Mime encrypted email, allowing revoked certificates to be accepted.

• How can I fix CVE-2023-0547?

  To fix CVE-2023-0547, update Thunderbird to version 102.10 or later.