REDHAT-BUG-2315953
First published: Tue Oct 01 2024(Updated: )
A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Firefox | <131 | |
| Firefox ESR | <128.3 | |
| Thunderbird | <128.3<131 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2024:7552
- https://access.redhat.com/errata/RHSA-2024:7621
- https://access.redhat.com/errata/RHSA-2024:7622
- https://access.redhat.com/errata/RHSA-2024:7646
- https://access.redhat.com/errata/RHSA-2024:7703
- https://access.redhat.com/errata/RHSA-2024:7704
- https://access.redhat.com/errata/RHSA-2024:7702
- https://access.redhat.com/errata/RHSA-2024:7699
- https://access.redhat.com/errata/RHSA-2024:7700
- https://access.redhat.com/errata/RHSA-2024:7842
- https://access.redhat.com/errata/RHSA-2024:7855
- https://access.redhat.com/errata/RHSA-2024:7853
- https://access.redhat.com/errata/RHSA-2024:7856
- https://access.redhat.com/errata/RHSA-2024:7854
- https://access.redhat.com/errata/RHSA-2024:8169
- https://access.redhat.com/errata/RHSA-2024:8166
- https://bugzilla.redhat.com/show_bug.cgi?id=2315953
Frequently Asked Questions
What is the severity of REDHAT-BUG-2315953?
The severity of REDHAT-BUG-2315953 is classified as critical due to potential memory corruption vulnerabilities.
How do I fix REDHAT-BUG-2315953?
To fix REDHAT-BUG-2315953, users should update to the latest versions of Firefox, Firefox ESR, or Thunderbird as recommended by the vendor.
Which software versions are affected by REDHAT-BUG-2315953?
REDHAT-BUG-2315953 affects Firefox versions earlier than 131, Firefox ESR versions earlier than 128.3, and Thunderbird versions earlier than 128.3 and 131.
What impact does REDHAT-BUG-2315953 have on users?
The impact of REDHAT-BUG-2315953 may include crashes or exploitation of memory corruption during JIT compilation, leading to unauthorized access or system instability.
Is there a workaround for REDHAT-BUG-2315953?
Currently, the best solution for REDHAT-BUG-2315953 is to apply the available updates rather than relying on workarounds.
- agent/severity
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-9400
- agent/last-modified-date
- agent/references
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/mozilla
- canonical/firefox
- canonical/firefox esr
- canonical/thunderbird