CVE-2024-10464: High severity Mozilla Thunderbird vulnerability
Last updated 6 November 2024
Other sources
Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser. This was addressed by introducing rate-limiting to this API.
— Mozilla
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 132.0.1-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 128.4.0esr-1~deb11u1Fixed in 128.4.0esr-1~deb12u1Fixed in 128.4.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:128.4.0esr-1~deb11u1Fixed in 1:128.4.0esr-1~deb12u1Fixed in 1:128.4.0esr-1Fixed in 1:128.4.2esr-1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 128.4 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 132 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 132 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 128.4
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-10464?
CVE-2024-10464 is classified as a moderate severity vulnerability due to the potential for causing Denial of Service in browser applications.
How do I fix CVE-2024-10464?
To fix CVE-2024-10464, upgrade to Mozilla Thunderbird version 132.0.1 or later, or Firefox version 132.0 or later.
What versions are affected by CVE-2024-10464?
CVE-2024-10464 affects Mozilla Thunderbird versions before 132 and Firefox versions before 132.
What kind of vulnerability is CVE-2024-10464?
CVE-2024-10464 is a Denial of Service vulnerability caused by repeated writes to history interface attributes.
Is CVE-2024-10464 related to any specific browsers?
Yes, CVE-2024-10464 specifically affects Mozilla Thunderbird and Firefox.