Red Hat Enterprise Linux 8.2 update for firefox
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 6 |
| CVE-ID | CVE-2021-29980 CVE-2021-29984 CVE-2021-29985 CVE-2021-29986 CVE-2021-29988 CVE-2021-29989 |
| CWE-ID | CWE-119 CWE-416 CWE-125 |
| Exploitation vector | Network |
| Public exploit | Public exploit code for vulnerability #3 is available. |
| Vulnerable software Subscribe |
firefox (Red Hat package) Operating systems & Components / Operating system package or component Red Hat Enterprise Linux Server - TUS Operating systems & Components / Operating system |
| Vendor | Red Hat Inc. |
Security Bulletin
This security bulletin contains information about 6 vulnerabilities.
1) Memory corruption
EUVDB-ID: #VU55683
Risk: High
CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-29980
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in a canvas object. A remote attacker can trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
firefox (Red Hat package): 78.2.0-2.el8_2 - 78.12.0-1.el8_2
Red Hat Enterprise Linux Server - TUS: 8.2
CPE2.3- cpe:2.3:o:red_hat:firefox_redhat_package:78.12.0-1.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:firefox_redhat_package:78.11.0-3.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:firefox_redhat_package:78.10.0-1.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2021:3156
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Buffer overflow
EUVDB-ID: #VU55682
Risk: High
CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-29984
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when performing JIT optimization. A remote attacker can trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
firefox (Red Hat package): 78.2.0-2.el8_2 - 78.12.0-1.el8_2
Red Hat Enterprise Linux Server - TUS: 8.2
CPE2.3- cpe:2.3:o:red_hat:firefox_redhat_package:78.12.0-1.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:firefox_redhat_package:78.11.0-3.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:firefox_redhat_package:78.10.0-1.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2021:3156
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Use-after-free
EUVDB-ID: #VU55684
Risk: High
CVSSv3.1: 7.9 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2021-29985
CWE-ID:
CWE-416 - Use After Free
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a use-after-free error in media channels within the MediaCacheStream::NotifyDataReceived method. A remote attacker can trick the victim to open a specially crafted web page, trigger a use-after-free error and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
firefox (Red Hat package): 78.2.0-2.el8_2 - 78.12.0-1.el8_2
Red Hat Enterprise Linux Server - TUS: 8.2
CPE2.3- cpe:2.3:o:red_hat:firefox_redhat_package:78.12.0-1.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:firefox_redhat_package:78.11.0-3.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:firefox_redhat_package:78.10.0-1.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2021:3156
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
4) Buffer overflow
EUVDB-ID: #VU55678
Risk: High
CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-29986
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a race condition in getaddrinfowhen resolving DNS names. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Note, the vulnerability affects Linux systems only.
Install updates from vendor's website.
firefox (Red Hat package): 78.2.0-2.el8_2 - 78.12.0-1.el8_2
Red Hat Enterprise Linux Server - TUS: 8.2
CPE2.3- cpe:2.3:o:red_hat:firefox_redhat_package:78.12.0-1.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:firefox_redhat_package:78.11.0-3.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:firefox_redhat_package:78.10.0-1.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2021:3156
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Out-of-bounds read
EUVDB-ID: #VU55680
Risk: High
CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-29988
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to a boundary condition when treating inline list-item element as a block element. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger an out-of-bounds read error and execute arbitrary code on the system.
Install updates from vendor's website.
firefox (Red Hat package): 78.2.0-2.el8_2 - 78.12.0-1.el8_2
Red Hat Enterprise Linux Server - TUS: 8.2
CPE2.3- cpe:2.3:o:red_hat:firefox_redhat_package:78.12.0-1.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:firefox_redhat_package:78.11.0-3.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:firefox_redhat_package:78.10.0-1.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2021:3156
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) Buffer overflow
EUVDB-ID: #VU55685
Risk: High
CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-29989
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing HTML content. A remote attacker can trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
firefox (Red Hat package): 78.2.0-2.el8_2 - 78.12.0-1.el8_2
Red Hat Enterprise Linux Server - TUS: 8.2
CPE2.3- cpe:2.3:o:red_hat:firefox_redhat_package:78.12.0-1.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:firefox_redhat_package:78.11.0-3.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:firefox_redhat_package:78.10.0-1.el8_2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2021:3156
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
