- Vulnerability/
- USN-6750-1
USN-6750-1: Thunderbird vulnerabilities
First published: Thu Apr 25 2024(Updated: )
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code. (CVE-2024-2609, CVE-2024-3852, CVE-2024-3864) Bartek Nowotarski discovered that Thunderbird did not properly limit HTTP/2 CONTINUATION frames. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-3302) Lukas Bernhard discovered that Thunderbird did not properly manage memory during JIT optimisations, leading to an out-of-bounds read vulnerability. An attacker could possibly use this issue to cause a denial of service or expose sensitive information. (CVE-2024-3854) Lukas Bernhard discovered that Thunderbird did not properly manage memory when handling JIT created code during garbage collection. An attacker could potentially exploit this issue to cause a denial of service, or execute arbitrary code. (CVE-2024-3857) Ronald Crane discovered that Thunderbird did not properly manage memory in the OpenType sanitizer on 32-bit devices, leading to an out-of-bounds read vulnerability. An attacker could possibly use this issue to cause a denial of service or expose sensitive information. (CVE-2024-3859) Ronald Crane discovered that Thunderbird did not properly manage memory when handling an AlignedBuffer. An attacker could potentially exploit this issue to cause denial of service, or execute arbitrary code. (CVE-2024-3861)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/thunderbird | <1:115.10.1+build1-0ubuntu0.23.10.1 | 1:115.10.1+build1-0ubuntu0.23.10.1 |
| Ubuntu Ubuntu | =23.10 | |
| All of | ||
| ubuntu/thunderbird | <1:115.10.1+build1-0ubuntu0.22.04.1 | 1:115.10.1+build1-0ubuntu0.22.04.1 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/thunderbird | <1:115.10.1+build1-0ubuntu0.20.04.1 | 1:115.10.1+build1-0ubuntu0.20.04.1 |
| Ubuntu Ubuntu | =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2024-3861
- https://ubuntu.com/security/CVE-2024-3859
- https://ubuntu.com/security/CVE-2024-2609
- https://ubuntu.com/security/CVE-2024-3864
- https://ubuntu.com/security/CVE-2024-3854
- https://ubuntu.com/security/CVE-2024-3302
- https://ubuntu.com/security/CVE-2024-3852
- https://ubuntu.com/security/CVE-2024-3857
- https://ubuntu.com/security/notices/USN-6747-1
- https://ubuntu.com/security/notices/USN-6703-1
- https://launchpad.net/ubuntu/+source/thunderbird/1:115.10.1+build1-0ubuntu0.23.10.1
- https://launchpad.net/ubuntu/+source/thunderbird/1:115.10.1+build1-0ubuntu0.22.04.1
- https://launchpad.net/ubuntu/+source/thunderbird/1:115.10.1+build1-0ubuntu0.20.04.1
- https://ubuntu.com/security/notices/USN-6750-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
- agent/severity
- collector/usn
- source/Ubuntu
- anchor-related/USN-6747-1
- anchor-related/USN-6703-1
- agent/software-canonical-lookup
- agent/references
- agent/title
- agent/last-modified-date
- agent/tags
- agent/description
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/event
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/23.10
- version/ubuntu ubuntu/22.04
- version/ubuntu ubuntu/20.04