USN-6143-1: Firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2023-34414, CVE-2023-34416, CVE-2023-34417) Jun Kokatsu discovered that Firefox did not properly validate site-isolated process for a document loaded from a data: URL that was the result of a redirect, leading to an open redirect attack. An attacker could possibly use this issue to perform phishing attacks. (CVE-2023-34415)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What are the vulnerabilities addressed by USN-6143-1?
The vulnerabilities addressed by USN-6143-1 are CVE-2023-34414, CVE-2023-34416, CVE-2023-34415.
What is the impact of the vulnerabilities addressed by USN-6143-1?
The impact of the vulnerabilities addressed by USN-6143-1 includes denial of service, sensitive information disclosure, and arbitrary code execution.
How can an attacker exploit the vulnerabilities addressed by USN-6143-1?
An attacker can exploit the vulnerabilities addressed by USN-6143-1 by tricking a user into opening a specially crafted website.
What is the recommended version of Firefox to fix the vulnerabilities addressed by USN-6143-1?
The recommended version of Firefox to fix the vulnerabilities addressed by USN-6143-1 is 114.0+build3-0ubuntu0.20.04.1.
Where can I find more information about the vulnerabilities addressed by USN-6143-1?
You can find more information about the vulnerabilities addressed by USN-6143-1 on the Ubuntu security website. Please refer to the following links: CVE-2023-34414, CVE-2023-34416, and CVE-2023-34415.