USN-6610-1: Firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-0741, CVE-2024-0742, CVE-2024-0743, CVE-2024-0744, CVE-2024-0745, CVE-2024-0747, CVE-2024-0748, CVE-2024-0749, CVE-2024-0750, CVE-2024-0751, CVE-2024-0753, CVE-2024-0754, CVE-2024-0755) Cornel Ionce discovered that Firefox did not properly manage memory when opening the print preview dialog. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-0746)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/firefoxto a version that resolves this vulnerability.Fixed in 122.0+build2-0ubuntu0.20.04.1
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6610-1?
USN-6610-1 addresses multiple security issues in Firefox that could potentially lead to denial of service, cross-domain information leakage, or arbitrary code execution.
How do I fix USN-6610-1?
To fix USN-6610-1, update Firefox to version 122.0+build2-0ubuntu0.20.04.1 or later on Ubuntu 20.04.
What vulnerabilities are addressed by USN-6610-1?
USN-6610-1 addresses CVE-2024-0741, CVE-2024-0745, and CVE-2024-0749 among others.
What platforms are affected by USN-6610-1?
USN-6610-1 primarily affects Firefox on Ubuntu 20.04.
Is it safe to use Firefox without updating after USN-6610-1?
Using Firefox without updating after USN-6610-1 exposes users to significant security risks including potential remote code execution.