Linux · Security advisory · January 30, 2024
RHSA-2024:0608: firefox security update
RHSA-2024:0608, released January 30, 2024, fixes 9 CVEs in firefox (version 0:115.7.0-1.el8_9). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0216
82nd percentile
Priority of the 9 CVEs
Patch now 0
Urgent 0
High 5
Routine 4
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| firefox | RHEL 8 | 0:115.7.0-1.el8_9 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2024-0741 | Mozilla Firefox ESR and 5 others: Out-of-bounds Write | 7.5 | 0.0216 | None reported | |
| High | CVE-2024-0750 | Mozilla Firefox ESR and 5 others: User Interface (UI) Misrepresentation of Critical Information | 8.8 | 0.0084 | None reported | |
| High | CVE-2024-0755 | Mozilla Firefox ESR and 5 others: Improper Control of Generation of Code ('Code Injection') | 8.8 | 0.0075 | None reported | |
| High | CVE-2024-0751 | Mozilla Firefox ESR and 5 others: Improper Privilege Management | 8.8 | 0.0063 | None reported | |
| High | CVE-2024-0742 | Mozilla Firefox ESR and 5 others: It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally… | 7.5 | 0.0060 | None reported | |
| Routine | CVE-2024-0746 | Mozilla Firefox ESR and 5 others: Use After Free | 6.5 | 0.0074 | None reported | |
| Routine | CVE-2024-0753 | Mozilla Firefox ESR and 5 others: In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. | 6.5 | 0.0072 | None reported | |
| Routine | CVE-2024-0747 | Mozilla Firefox ESR and 5 others: Protection Mechanism Failure | 6.5 | 0.0060 | None reported | |
| Routine | CVE-2024-0749 | Mozilla Firefox ESR and 5 others: Origin Validation Error | 6.1 | 0.0034 | None reported |
Showing 1 to 9 of 9
1