First published: Mon Mar 25 2024(Updated: )
Manfred Paul discovered that Firefox did not properly perform bounds checking during range analysis, leading to an out-of-bounds write vulnerability. A attacker could use this to cause a denial of service, or execute arbitrary code. (CVE-2024-29943) Manfred Paul discovered that Firefox incorrectly handled MessageManager listeners under certain circumstances. An attacker who was able to inject an event handler into a privileged object may have been able to execute arbitrary code. (CVE-2024-29944)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/firefox | <124.0.1+build1-0ubuntu0.20.04.1 | 124.0.1+build1-0ubuntu0.20.04.1 |
Ubuntu Linux | =20.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of USN-6710-1 is critical due to the out-of-bounds write vulnerability that can lead to arbitrary code execution.
To fix USN-6710-1, you should update Firefox to version 124.0.1+build1-0ubuntu0.20.04.1 or later.
USN-6710-1 addresses a critical out-of-bounds write vulnerability identified as CVE-2024-29943.
Yes, USN-6710-1 can lead to a denial of service if exploited through the out-of-bounds write vulnerability.
The vulnerability in USN-6710-1 was discovered by Manfred Paul.