TI-2021-10606 CVE-2021-29989 · GHSA-2j98-m58x-h9xv
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 41
Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12.
RHSA-2021:3154
firefox security update
Released 2021-08-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) firefox-78.13.0-2.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-78.13.0-2.el7_9
- Red Hat Enterprise Linux Server (v. 7) firefox-78.13.0-2.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-78.13.0-2.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) firefox-78.13.0-2.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-78.13.0-2.el7_9
Fixes 6 records
TI-2021-10605 CVE-2021-29988 · GHSA-rqrh-6wcg-wqw7
Out-of-bounds read in Mozilla Thunderbird
Priority MEDIUM 41
Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploitable crash.
TI-2021-10602 CVE-2021-29985 · GHSA-j4mj-qqm4-jqf7
Use after free in Mozilla Thunderbird
Priority MEDIUM 41
A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash.
TI-2021-10601 CVE-2021-29984 · GHSA-9qg9-jm6v-8f8r
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 41
Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection.
TI-2021-10597 CVE-2021-29980 · GHSA-5w5f-pvc9-xxph
Missing initialization of resource in Mozilla Thunderbird
Priority MEDIUM 41
Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash.
TI-2021-10603 CVE-2021-29986 · GHSA-vrcx-8xp2-2764
Race condition in Mozilla Thunderbird
Priority LOW 38
A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash.