An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nss-util-develUpgrade nss-softoknUpgrade firefoxUpgrade nss-softokn-freebl-develUpgrade nss-softokn-develUpgrade nss-softokn-freeblUpgrade nss-sysinitUpgrade nspr-develUpgrade thunderbirdUpgrade nsprUpgrade firefox-x11Upgrade nss-develUpgrade nss-utilUpgrade nss-toolsUpgrade nss | Feb 22, 2023 | Feb 20, 2023 |
| Alpine Linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-esr | Aug 22, 2024 | Jun 2, 2023 |
| Amazon Linux Ami 2 | — | Upgrade nssUpgrade nss-pkcs11-develUpgrade nss-develUpgrade nss-sysinitUpgrade thunderbird-debuginfoUpgrade nss-toolsUpgrade firefoxUpgrade firefox-debuginfoUpgrade nss-debuginfoUpgrade thunderbird | Mar 7, 2023 | Mar 7, 2023 |
| Amazon_linux | — | Upgrade nss | May 4, 2023 | Feb 16, 2023 |
| Amazon_linux_2023 | — | Upgrade nssUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-toolsUpgrade nspr-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-softoknUpgrade nss-debugsourceUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-freeblUpgrade nss-util-develUpgrade nss-pkcs11-develUpgrade nspr-develUpgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nsprUpgrade nss-utilUpgrade nss-sysinitUpgrade nss-softokn-develUpgrade nss-util-debuginfoUpgrade nss-debuginfo | Feb 17, 2025 | Feb 14, 2023 |
| Centos_linux | — | Upgrade nssUpgrade nss-pkcs11-develUpgrade nss-sysinitUpgrade nss-toolsUpgrade nss-develUpgrade nss-debuginfo | Feb 22, 2023 | Feb 20, 2023 |
| Debian | — | Upgrade firefox-esrUpgrade nssUpgrade thunderbird | Feb 17, 2023 | Feb 17, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin. | May 31, 2023 | May 30, 2023 |
| Mfsa2023 05 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 110.0 | Feb 16, 2023 | Feb 14, 2023 |
| Mfsa2023 06 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 102.8 | Feb 16, 2023 | Feb 14, 2023 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 102.8 | Feb 17, 2023 | Feb 15, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 9, 2024 |
| Oracle_linux | — | Upgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nss-util-develUpgrade nss-pkcs11-develUpgrade nssUpgrade nss-utilUpgrade thunderbirdUpgrade nspr-develUpgrade nsprUpgrade nss-softokn-develUpgrade nss-softoknUpgrade nss-softokn-freeblUpgrade firefoxUpgrade nss-toolsUpgrade firefox-x11Upgrade nss-sysinit | Feb 21, 2023 | Feb 14, 2023 |
| Redhat_linux | — | Upgrade nss-softokn-freebl-debuginfoUpgrade nss-util-debuginfoUpgrade nss-utilUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-sysinit-debuginfoUpgrade nssUpgrade nspr-debuginfoUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nss-toolsUpgrade nss-softokn-develUpgrade nss-debugsourceUpgrade nss-util-develUpgrade nss-softokn-freeblUpgrade nsprUpgrade nspr-develUpgrade nss-debuginfoUpgrade nss-tools-debuginfoUpgrade nss-softoknUpgrade nss-sysinit | Feb 22, 2023 | Feb 20, 2023 |
| Rocky_linux | — | Upgrade nss-util-debuginfoUpgrade nssUpgrade thunderbird-debuginfoUpgrade nss-util-develUpgrade nss-sysinit-debuginfoUpgrade firefoxUpgrade nss-sysinitUpgrade nss-tools-debuginfoUpgrade firefox-debugsourceUpgrade nss-toolsUpgrade firefox-x11Upgrade nss-softoknUpgrade nss-debuginfoUpgrade nspr-debuginfoUpgrade nsprUpgrade thunderbirdUpgrade nss-softokn-freeblUpgrade nss-debugsourceUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freebl-develUpgrade nspr-develUpgrade nss-develUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-develUpgrade firefox-debuginfoUpgrade thunderbird-debugsourceUpgrade nss-util | Mar 12, 2024 | Jun 2, 2023 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-32bitUpgrade libsoftokn3-32bitUpgrade MozillaFirefoxUpgrade libsoftokn3-hmac-32bitUpgrade mozilla-nss-develUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-toolsUpgrade libsoftokn3Upgrade libfreebl3-32bitUpgrade mozilla-nss-certsUpgrade libfreebl3-hmac-32bitUpgrade libfreebl3Upgrade libfreebl3-hmacUpgrade mozilla-nss-sysinitUpgrade MozillaThunderbirdUpgrade mozilla-nssUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-certs-32bitUpgrade MozillaFirefox-develUpgrade libsoftokn3-hmacUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-other | Feb 17, 2023 | Feb 16, 2023 |
| Ubuntu | — | Upgrade libnss3 (Ubuntu Pro)Upgrade thunderbirdUpgrade firefoxUpgrade libnss3 | Mar 22, 2023 | Feb 20, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 2, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub