CVE-2024-1546: High severity Mozilla Thunderbird vulnerability
Last updated 24 July 2024
Other sources
When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read.
— Mozilla
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 115.8 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 123 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 115.8 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 137.0.2-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 115.14.0esr-1~deb11u1Fixed in 128.9.0esr-1~deb11u1Fixed in 128.8.0esr-1~deb12u1Fixed in 128.9.0esr-1~deb12u1Fixed in 128.9.0esr-2 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:115.12.0-1~deb11u1Fixed in 1:128.9.0esr-1~deb11u1Fixed in 1:128.8.0esr-1~deb12u1Fixed in 1:128.9.0esr-1~deb12u1Fixed in 1:128.9.0esr-1 - Upgrade
Upgrade
redhat/firefoxto a version that resolves this vulnerability.Fixed in 115.8 - Upgrade
Upgrade
redhat/thunderbirdto a version that resolves this vulnerability.Fixed in 115.8
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-1546?
CVE-2024-1546 has been rated as a moderate severity vulnerability due to the potential for out-of-bounds memory reads.
How do I fix CVE-2024-1546?
To fix CVE-2024-1546, update Mozilla Firefox to version 123 or higher, Mozilla Thunderbird to version 115.8 or higher, or the specific affected packages as recommended.
Which software is affected by CVE-2024-1546?
CVE-2024-1546 affects Mozilla Firefox up to version 123, Mozilla Thunderbird up to version 115.8, and various versions of Firefox ESR.
What is the impact of CVE-2024-1546?
The impact of CVE-2024-1546 includes potential unauthorized access to sensitive data due to an out-of-bounds memory read.
Is there a workaround for CVE-2024-1546 before applying updates?
There are no specific workarounds for CVE-2024-1546; the recommended action is to apply the necessary updates as soon as possible.