CVE-2023-6207: Use After Free
Published Nov 21, 2023
·Updated
Ownership mismanagement led to a use-after-free in ReadableByteStreams
Affected Software
19 affected componentsFixes available
redhat/firefox<115.5
115.5
redhat/thunderbird<115.5
115.5
ubuntu/firefox<120.0+
120.0+
ubuntu/thunderbird<1:115.5.0+
1:115.5.0+
ubuntu/thunderbird<1:115.5.0+
1:115.5.0+
ubuntu/thunderbird<1:115.5.0+
1:115.5.0+
ubuntu/thunderbird<1:115.5.0+
1:115.5.0+
debian/firefox
123.0-1
debian/firefox-esr<=91.12.0esr-1~deb10u1
115.8.0esr-1~deb10u1115.7.0esr-1~deb11u1115.8.0esr-1~deb11u1115.7.0esr-1~deb12u1115.8.0esr-1~deb12u1115.8.0esr-1
debian/thunderbird<=1:91.12.0-1~deb10u1
1:115.8.0-1~deb10u11:115.7.0-1~deb11u11:115.8.0-1~deb11u11:115.7.0-1~deb12u11:115.8.0-1~deb12u11:115.7.0-11:115.8.1-1
Mozilla Thunderbird<115.5
115.5
Mozilla Firefox ESR<115.5
115.5
Mozilla Firefox<120
120
Mozilla Firefox<120.0
Mozilla Firefox ESR<115.5.0
Mozilla Thunderbird<115.5
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Debian Debian Linux=12.0
Event History
Nov 21, 2023
CVE Published
via Ubuntu·12:00 AM
CVE Published
via MITRE·02:28 PM
Data Sourced
via MITRE·02:28 PM
DescriptionWeakness
Jan 12, 2024
Data Sourced
via Launchpad·12:28 AM
Description
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is CVE-2023-6207?
CVE-2023-6207 is a vulnerability in ReadableByteStreams in Firefox and Thunderbird that is caused by ownership mismanagement and can lead to a use-after-free scenario.
2
Which software versions are affected by CVE-2023-6207?
This vulnerability affects Firefox versions earlier than 120, Firefox versions earlier than 115.5, and Thunderbird versions earlier than 115.5.0.
3
What is the severity of CVE-2023-6207?
The severity of CVE-2023-6207 is high, with a CVSS score of 7.
4
How can I fix CVE-2023-6207?
To fix CVE-2023-6207, update your Firefox or Thunderbird to version 115.5.0 or higher.
5
Where can I find more information about CVE-2023-6207?
You can find more information about CVE-2023-6207 in the following references: [1] [2] [3]