CVE-2023-32214 — Uncontrolled Resource Consumption in Mozilla Firefox

CWE-400 — Uncontrolled Resource Consumption8 documents6 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 52.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxMozilla Firefox ESRMozilla Thunderbird
Timeline
PublishedJun 19

Description

Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages6 packages

▶CVEListV5mozilla/firefoxunspecified — 113
▶NVDmozilla/firefox< 113.0
▶CVEListV5mozilla/firefox_esrunspecified — 102.11
▶NVDmozilla/firefox_esr< 102.11
▶CVEListV5mozilla/thunderbirdunspecified — 102.11

🔴Vulnerability Details

2
CVEList
CVE-2023-32214: Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service↗2023-06-19
▶
GHSA
GHSA-9cm9-63jc-g4wg: Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service↗2023-06-19
▶

📋Vendor Advisories

5
Red Hat
Mozilla: Potential DoS via exposed protocol handlers↗2023-05-09
▶
Debian
CVE-2023-32214: firefox - Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigge...↗2023
▶
Mozilla
Mozilla Foundation Security Advisory 2023-17: CVE-2023-32214↗
▶
Mozilla
Mozilla Foundation Security Advisory 2023-16: CVE-2023-32214↗
▶
Mozilla
Mozilla Foundation Security Advisory 2023-18: CVE-2023-32214↗
▶
CVE-2023-32214 — Uncontrolled Resource Consumption | cvebase