Red Hat Enterprise Linux 8 update for firefox
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 8 |
| CVE-ID | CVE-2024-1546 CVE-2024-1547 CVE-2024-1553 CVE-2024-1548 CVE-2024-1549 CVE-2024-1550 CVE-2024-1551 CVE-2024-1552 |
| CWE-ID | CWE-125 CWE-451 CWE-119 CWE-20 CWE-399 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software Subscribe |
Red Hat Enterprise Linux Server - AUS Operating systems & Components / Operating system Red Hat Enterprise Linux Server - TUS Operating systems & Components / Operating system Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions Operating systems & Components / Operating system package or component firefox (Red Hat package) Operating systems & Components / Operating system package or component |
| Vendor | Red Hat Inc. |
Security Bulletin
This security bulletin contains information about 8 vulnerabilities.
1) Out-of-bounds read
EUVDB-ID: #VU86637
Risk: High
CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-1546
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error when storing and re-accessing data on a networking channel. A remote attacker can trick the victim to visit a specially crafted website, trigger an out-of-bounds read and execute arbitrary code on the target system.
MitigationInstall updates from vendor's website.
Red Hat Enterprise Linux Server - AUS: 8.2
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions: 8.2
Red Hat Enterprise Linux Server - TUS: 8.2
firefox (Red Hat package): before 115.8.0-1.el8_2
CPE2.3- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_aus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_for_ibm_power_le_-_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2024:0972
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Spoofing attack
EUVDB-ID: #VU86638
Risk: Medium
CVSSv3.1: 4.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-1547
CWE-ID:
CWE-451 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to incorrect processing of user-supplied data. A remote attacker can use a series of API calls and redirects to display an attacker-controlled alert dialog on another website (with the victim website's URL shown).
MitigationInstall updates from vendor's website.
Red Hat Enterprise Linux Server - AUS: 8.2
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions: 8.2
Red Hat Enterprise Linux Server - TUS: 8.2
firefox (Red Hat package): before 115.8.0-1.el8_2
CPE2.3- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_aus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_for_ibm_power_le_-_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2024:0972
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Buffer overflow
EUVDB-ID: #VU86644
Risk: High
CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-1553
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing HTML content. A remote attacker can create a specially crafted website, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Red Hat Enterprise Linux Server - AUS: 8.2
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions: 8.2
Red Hat Enterprise Linux Server - TUS: 8.2
firefox (Red Hat package): before 115.8.0-1.el8_2
CPE2.3- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_aus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_for_ibm_power_le_-_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2024:0972
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Spoofing attack
EUVDB-ID: #VU86639
Risk: Medium
CVSSv3.1: 4.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-1548
CWE-ID:
CWE-451 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to incorrect processing of user-supplied data. A remote attacker can hide the fullscreen notification by using a dropdown select input element.
MitigationInstall updates from vendor's website.
Red Hat Enterprise Linux Server - AUS: 8.2
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions: 8.2
Red Hat Enterprise Linux Server - TUS: 8.2
firefox (Red Hat package): before 115.8.0-1.el8_2
CPE2.3- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_aus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_for_ibm_power_le_-_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2024:0972
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Spoofing attack
EUVDB-ID: #VU86640
Risk: Medium
CVSSv3.1: 4.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-1549
CWE-ID:
CWE-451 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to incorrect processing of user-supplied data. A remote attacker can use a malicious website to set a large custom cursor, portions of the which can overlap with the permission dialog, potentially resulting in user confusion and unexpected granted permissions.
MitigationInstall updates from vendor's website.
Red Hat Enterprise Linux Server - AUS: 8.2
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions: 8.2
Red Hat Enterprise Linux Server - TUS: 8.2
firefox (Red Hat package): before 115.8.0-1.el8_2
CPE2.3- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_aus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_for_ibm_power_le_-_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2024:0972
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) Spoofing attack
EUVDB-ID: #VU86641
Risk: Medium
CVSSv3.1: 4.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-1550
CWE-ID:
CWE-451 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to incorrect processing of user-supplied data. A remote attacker can use a combination of exiting fullscreen mode and `requestPointerLock` to cause the user's mouse to be re-positioned unexpectedly, which could have led to user confusion and inadvertently granting permissions they did not intend to grant.
MitigationInstall updates from vendor's website.
Red Hat Enterprise Linux Server - AUS: 8.2
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions: 8.2
Red Hat Enterprise Linux Server - TUS: 8.2
firefox (Red Hat package): before 115.8.0-1.el8_2
CPE2.3- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_aus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_for_ibm_power_le_-_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2024:0972
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
7) Input validation error
EUVDB-ID: #VU86642
Risk: Medium
CVSSv3.1: 4.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-1551
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
Description
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to insufficient validation of user-supplied input when processing Set-Cookie response headers in multipart HTTP responses. A remote attacker who controls the Content-Type response header and part of the response body can inject Set-Cookie response headers that are honored by the browser.
MitigationInstall updates from vendor's website.
Red Hat Enterprise Linux Server - AUS: 8.2
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions: 8.2
Red Hat Enterprise Linux Server - TUS: 8.2
firefox (Red Hat package): before 115.8.0-1.el8_2
CPE2.3- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_aus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_for_ibm_power_le_-_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2024:0972
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
8) Resource management error
EUVDB-ID: #VU86643
Risk: Low
CVSSv3.1: 3.7 [CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-1552
CWE-ID:
CWE-399 - Resource Management Errors
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to improper management of internal resources within the browser during code generation on 32-bit ARM devices. A remote attacker can trick the victim to visit a specially crafted website and bypass implemented security restrictions.
Install updates from vendor's website.
Red Hat Enterprise Linux Server - AUS: 8.2
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions: 8.2
Red Hat Enterprise Linux Server - TUS: 8.2
firefox (Red Hat package): before 115.8.0-1.el8_2
CPE2.3- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_aus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_for_ibm_power_le_-_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:
- cpe:2.3:o:red_hat:red_hat_enterprise_linux_server_-_tus:8.2:*:*:*:*:red_hat_enterprise_linux:*:
http://access.redhat.com/errata/RHSA-2024:0972
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
