CVE-2023-5173: Integer Overflow
In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a local unprivileged webpage), leading to an out-of-bounds write to privileged process memory. This bug only affects Firefox if a non-standard preference allowing non-HTTPS Alternate Services (network.http.altsvc.oe) is enabled. This vulnerability affects Firefox < 118.
Other sources
In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a local unprivileged webpage), leading to an out-of-bounds write to privileged process memory. This bug only affects Firefox if a non-standard preference allowing non-HTTPS Alternate Services (network.http.altsvc.oe) is enabled.
— Mozilla
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-5173?
The severity of CVE-2023-5173 is medium.
How does CVE-2023-5173 affect Firefox?
CVE-2023-5173 affects Firefox if a non-standard preference allowing integer overflow is enabled.
What is the potential impact of CVE-2023-5173?
CVE-2023-5173 could lead to an out-of-bounds write to privileged process memory.
How can I fix CVE-2023-5173?
To fix CVE-2023-5173, update Firefox to version 118 or later.
Is there more information available about CVE-2023-5173?
Yes, you can find more information about CVE-2023-5173 in the references provided: [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1823172) and [Mozilla security advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2023-41/).