CVE-2024-1555
published 2024-02-20CVE-2024-1555: When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox < 123.
PriorityP339high8.3CVSS 3.1
AVNACLPRNUIRSUCHIHAL
EPSS
0.48%
38.1th percentile
When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox < 123.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | < firefox 123.0-1 (sid) | firefox 123.0-1 (sid) |
| mozilla | firefox | < 123.0 | 123.0 |
| mozilla | firefox | — | — |
| mozilla | firefox | >= 0 < 123.0+build3-0ubuntu0.20.04.1 | 123.0+build3-0ubuntu0.20.04.1 |
| mozilla | firefox | >= 0 < 123.0.1+build1-0ubuntu0.20.04.1 | 123.0.1+build1-0ubuntu0.20.04.1 |
| mozilla | firefox | >= unspecified < 123 | 123 |
CVSS provenance
nvdv3.18.3HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
osv8.3HIGH
vendor_debian8.3HIGH
vendor_ubuntu7.5HIGH
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
vendor_redhat·2024-05-19·CVSS 5.5
CVE-2024-35944 [MEDIUM] kernel: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
kernel: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
In the Linux kernel, the following vulnerability has been resolved:
VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
Syzkaller hit 'WARNING in dg_dispatch_as_host' bug.
memcpy: detected field-spanning write (size 56) of single field "&dg_info->msg"
at drivers/misc/vmw_vmci/vmci_datagram.c:237 (size 24)
WARNING: CPU: 0 PID: 1555 at drivers/misc/vmw_vmci/vmci_datagram.c:237
dg_dispatch_as_host+0x88e/0xa60 drivers/misc/vmw_vmci/vmci_datagram.c:237
Some code commentry, based on my understanding:
544 #define VMCI_DG_SIZE(_dg) (VMCI_DG_HEADERSIZE + (size_t)(_dg)->payload_size)
/// This is 24 + payload_size
memcpy(&dg_info->msg, dg, dg_size);
Destination = dg_info->msg ---> this is a 24 byte
structure(struct vmci_da
Ubuntu
Firefox regressions
vendor_ubuntu·2024-03-06·CVSS 7.5
[HIGH] Firefox regressions
Title: Firefox regressions
Summary: USN-6649-1 caused some minor regressions in Firefox.
USN-6649-1 fixed vulnerabilities in Firefox. The update introduced
several minor regressions. This update fixes the problem.
Original advisory details:
Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information across domains, or execute arbitrary code. (CVE-2024-1547,
CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1554,
CVE-2024-1555, CVE-2024-1557)
Alfred Peters discovered that Firefox did not properly manage memory when
storing and re-accessing data on a networking channel. An attacker could
potentially exploit th
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2024-02-22·CVSS 7.5
CVE-2024-1550 [HIGH] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Several security issues were fixed in Firefox.
Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information across domains, or execute arbitrary code. (CVE-2024-1547,
CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1554,
CVE-2024-1555, CVE-2024-1557)
Alfred Peters discovered that Firefox did not properly manage memory when
storing and re-accessing data on a networking channel. An attacker could
potentially exploit this issue to cause a denial of service.
(CVE-2024-1546)
Johan Carlsson discovered that Firefox incorrectly handled Set-Cookie
response headers in multipart
Debian
CVE-2024-1555: firefox - When opening a website using the `firefox://` protocol handler, SameSite cookies...
vendor_debian·2024·CVSS 8.3
CVE-2024-1555 [HIGH] CVE-2024-1555: firefox - When opening a website using the `firefox://` protocol handler, SameSite cookies...
When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox < 123.
Scope: local
sid: resolved (fixed in 123.0-1)
Mozilla
Mozilla Foundation Security Advisory 2024-05: CVE-2024-1555
vendor_mozilla·CVSS 8.3
CVE-2024-1555 [HIGH] Mozilla Foundation Security Advisory 2024-05: CVE-2024-1555
Mozilla Foundation Security Advisory 2024-05
CVE: CVE-2024-1555
Product: Firefox
Impact: high
Fixed in: Firefox 123
OSV
firefox regressions
osv·2024-03-06·CVSS 7.5
CVE-2024-1547 [HIGH] firefox regressions
firefox regressions
USN-6649-1 fixed vulnerabilities in Firefox. The update introduced
several minor regressions. This update fixes the problem.
Original advisory details:
Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information across domains, or execute arbitrary code. (CVE-2024-1547,
CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1554,
CVE-2024-1555, CVE-2024-1557)
Alfred Peters discovered that Firefox did not properly manage memory when
storing and re-accessing data on a networking channel. An attacker could
potentially exploit this issue to cause a denial of service.
(CVE-2024-1546)
Johan Carlsson
OSV
firefox vulnerabilities
osv·2024-02-22·CVSS 7.5
CVE-2024-1547 [HIGH] firefox vulnerabilities
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information across domains, or execute arbitrary code. (CVE-2024-1547,
CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1554,
CVE-2024-1555, CVE-2024-1557)
Alfred Peters discovered that Firefox did not properly manage memory when
storing and re-accessing data on a networking channel. An attacker could
potentially exploit this issue to cause a denial of service.
(CVE-2024-1546)
Johan Carlsson discovered that Firefox incorrectly handled Set-Cookie
response headers in multipart HTTP responses. An attacker could
potentially exploit this issue
GHSA
GHSA-j6qq-7xp7-c5p5: When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected
ghsa_unreviewed·2024-02-20
CVE-2024-1555 [HIGH] CWE-290 GHSA-j6qq-7xp7-c5p5: When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected
When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox < 123.
OSV
CVE-2024-1555: When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected
osv·2024-02-20·CVSS 8.3
CVE-2024-1555 [HIGH] CVE-2024-1555: When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected
When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox < 123.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-02-20
Published