CVE-2023-1945: Medium severity Mozilla Thunderbird vulnerability

Q: What is CVE-2023-1945?

CVE-2023-1945 is a vulnerability that could have led to memory corruption and a potentially exploitable crash in Thunderbird and Firefox ESR.

Q: Which software versions are affected by CVE-2023-1945?

Thunderbird versions prior to 102.10 and Firefox ESR versions prior to 102.10 are affected by CVE-2023-1945.

Q: How severe is CVE-2023-1945?

CVE-2023-1945 has a severity rating of medium.

Q: How can I fix the CVE-2023-1945 vulnerability in Thunderbird?

To fix the CVE-2023-1945 vulnerability in Thunderbird, update to version 102.10 or higher.

Q: How can I fix the CVE-2023-1945 vulnerability in Firefox ESR?

To fix the CVE-2023-1945 vulnerability in Firefox ESR, update to version 102.10 or higher.

Published Apr 11, 2023

Updated

Last updated 24 July 2024

Other sources

Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash.

Affected Software

6 affected componentsFixes available

debian/firefox-esr

115.14.0esr-1~deb11u1128.3.0esr-1~deb11u2115.14.0esr-1~deb12u1128.3.0esr-1~deb12u1115.15.0esr-1128.3.0esr-2

debian/thunderbird

1:115.12.0-1~deb11u11:115.15.0-1~deb11u11:115.12.0-1~deb12u11:115.15.0-1~deb12u11:128.2.0esr-11:128.3.0esr-1

Mozilla Thunderbird<102.10

102.10

Mozilla Firefox ESR<102.10

Mozilla Thunderbird<102.10

Mozilla Firefox ESR<102.10

102.10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/firefox-esr to a version that resolves this vulnerability.
Fixed in 115.14.0esr-1~deb11u1Fixed in 128.3.0esr-1~deb11u2Fixed in 115.14.0esr-1~deb12u1Fixed in 128.3.0esr-1~deb12u1Fixed in 115.15.0esr-1Fixed in 128.3.0esr-2
Upgrade
Upgrade debian/thunderbird to a version that resolves this vulnerability.
Fixed in 1:115.12.0-1~deb11u1Fixed in 1:115.15.0-1~deb11u1Fixed in 1:115.12.0-1~deb12u1Fixed in 1:115.15.0-1~deb12u1Fixed in 1:128.2.0esr-1Fixed in 1:128.3.0esr-1
Upgrade
Upgrade Thunderbird to a version that resolves this vulnerability.
Fixed in 102.10
Upgrade
Upgrade Firefox ESR to a version that resolves this vulnerability.
Fixed in 102.10

Event History

Apr 11, 2023

CVE Published

12:00 AM

Jun 2, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

05:15 PM

Description

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2023-1945?

CVE-2023-1945 is a vulnerability that could have led to memory corruption and a potentially exploitable crash in Thunderbird and Firefox ESR.

Which software versions are affected by CVE-2023-1945?

Thunderbird versions prior to 102.10 and Firefox ESR versions prior to 102.10 are affected by CVE-2023-1945.

How severe is CVE-2023-1945?

CVE-2023-1945 has a severity rating of medium.

How can I fix the CVE-2023-1945 vulnerability in Thunderbird?

To fix the CVE-2023-1945 vulnerability in Thunderbird, update to version 102.10 or higher.

How can I fix the CVE-2023-1945 vulnerability in Firefox ESR?

To fix the CVE-2023-1945 vulnerability in Firefox ESR, update to version 102.10 or higher.

CVE-2023-1945: Medium severity Mozilla Thunderbird vulnerability

Other sources

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is CVE-2023-1945?

Which software versions are affected by CVE-2023-1945?

How severe is CVE-2023-1945?

How can I fix the CVE-2023-1945 vulnerability in Thunderbird?

How can I fix the CVE-2023-1945 vulnerability in Firefox ESR?

Company

Resources

Contact