CVE-2024-1555 — Authentication Bypass by Spoofing

Vendor	Product	Version range	Fixed in
debian	firefox	< firefox 123.0-1 (sid)	firefox 123.0-1 (sid)
mozilla	firefox	< 123.0	123.0
mozilla	firefox	—	—
mozilla	firefox	>= 0 < 123.0+build3-0ubuntu0.20.04.1	123.0+build3-0ubuntu0.20.04.1
mozilla	firefox	>= 0 < 123.0.1+build1-0ubuntu0.20.04.1	123.0.1+build1-0ubuntu0.20.04.1
mozilla	firefox	>= unspecified < 123	123

Red Hat

kernel: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()

vendor_redhat·2024-05-19·CVSS 5.5

CVE-2024-35944 [MEDIUM] kernel: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() kernel: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() Syzkaller hit 'WARNING in dg_dispatch_as_host' bug. memcpy: detected field-spanning write (size 56) of single field "&dg_info->msg" at drivers/misc/vmw_vmci/vmci_datagram.c:237 (size 24) WARNING: CPU: 0 PID: 1555 at drivers/misc/vmw_vmci/vmci_datagram.c:237 dg_dispatch_as_host+0x88e/0xa60 drivers/misc/vmw_vmci/vmci_datagram.c:237 Some code commentry, based on my understanding: 544 #define VMCI_DG_SIZE(_dg) (VMCI_DG_HEADERSIZE + (size_t)(_dg)->payload_size) /// This is 24 + payload_size memcpy(&dg_info->msg, dg, dg_size); Destination = dg_info->msg ---> this is a 24 byte structure(struct vmci_da

Ubuntu

Firefox regressions

vendor_ubuntu·2024-03-06·CVSS 7.5

[HIGH] Firefox regressions Title: Firefox regressions Summary: USN-6649-1 caused some minor regressions in Firefox. USN-6649-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1554, CVE-2024-1555, CVE-2024-1557) Alfred Peters discovered that Firefox did not properly manage memory when storing and re-accessing data on a networking channel. An attacker could potentially exploit th

Ubuntu

Firefox vulnerabilities

vendor_ubuntu·2024-02-22·CVSS 7.5

CVE-2024-1550 [HIGH] Firefox vulnerabilities Title: Firefox vulnerabilities Summary: Several security issues were fixed in Firefox. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1554, CVE-2024-1555, CVE-2024-1557) Alfred Peters discovered that Firefox did not properly manage memory when storing and re-accessing data on a networking channel. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-1546) Johan Carlsson discovered that Firefox incorrectly handled Set-Cookie response headers in multipart

Debian

CVE-2024-1555: firefox - When opening a website using the `firefox://` protocol handler, SameSite cookies...

vendor_debian·2024·CVSS 8.3

CVE-2024-1555 [HIGH] CVE-2024-1555: firefox - When opening a website using the `firefox://` protocol handler, SameSite cookies... When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox < 123. Scope: local sid: resolved (fixed in 123.0-1)

Mozilla

Mozilla Foundation Security Advisory 2024-05: CVE-2024-1555

vendor_mozilla·CVSS 8.3

CVE-2024-1555 [HIGH] Mozilla Foundation Security Advisory 2024-05: CVE-2024-1555 Mozilla Foundation Security Advisory 2024-05 CVE: CVE-2024-1555 Product: Firefox Impact: high Fixed in: Firefox 123

OSV

firefox regressions

osv·2024-03-06·CVSS 7.5

CVE-2024-1547 [HIGH] firefox regressions firefox regressions USN-6649-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1554, CVE-2024-1555, CVE-2024-1557) Alfred Peters discovered that Firefox did not properly manage memory when storing and re-accessing data on a networking channel. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-1546) Johan Carlsson

OSV

firefox vulnerabilities

osv·2024-02-22·CVSS 7.5

CVE-2024-1547 [HIGH] firefox vulnerabilities firefox vulnerabilities Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1554, CVE-2024-1555, CVE-2024-1557) Alfred Peters discovered that Firefox did not properly manage memory when storing and re-accessing data on a networking channel. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-1546) Johan Carlsson discovered that Firefox incorrectly handled Set-Cookie response headers in multipart HTTP responses. An attacker could potentially exploit this issue

GHSA

GHSA-j6qq-7xp7-c5p5: When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected

ghsa_unreviewed·2024-02-20

CVE-2024-1555 [HIGH] CWE-290 GHSA-j6qq-7xp7-c5p5: When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox < 123.

OSV

CVE-2024-1555: When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected

osv·2024-02-20·CVSS 8.3

CVE-2024-1555 [HIGH] CVE-2024-1555: When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox < 123.

CVE-2024-1555: When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox < 123.

Affected

CVSS provenance