An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nssUpgrade nss-toolsUpgrade nss-develUpgrade firefox-x11Upgrade nss-utilUpgrade thunderbirdUpgrade nss-sysinitUpgrade nss-util-develUpgrade nss-softokn-develUpgrade nsprUpgrade firefoxUpgrade nss-softokn-freebl-develUpgrade nss-softoknUpgrade nspr-develUpgrade nss-softokn-freebl | Feb 22, 2023 | Feb 20, 2023 |
| Alpine Linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-esr | Aug 22, 2024 | Jun 2, 2023 |
| Amazon Linux Ami 2 | — | Upgrade firefox-debuginfoUpgrade nss-develUpgrade nss-sysinitUpgrade nss-toolsUpgrade thunderbird-debuginfoUpgrade thunderbirdUpgrade firefoxUpgrade nss-debuginfoUpgrade nss-pkcs11-develUpgrade nss | Mar 7, 2023 | Mar 7, 2023 |
| Amazon_linux | — | Upgrade nss | May 4, 2023 | Feb 16, 2023 |
| Amazon_linux_2023 | — | Upgrade nss-pkcs11-develUpgrade nss-softokn-freeblUpgrade nss-softokn-freebl-debuginfoUpgrade nss-util-debuginfoUpgrade nss-debuginfoUpgrade nss-softokn-develUpgrade nss-util-develUpgrade nss-sysinitUpgrade nss-develUpgrade nss-utilUpgrade nss-softokn-freebl-develUpgrade nsprUpgrade nspr-develUpgrade nss-debugsourceUpgrade nss-softoknUpgrade nss-sysinit-debuginfoUpgrade nss-tools-debuginfoUpgrade nspr-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-toolsUpgrade nss | Feb 17, 2025 | Feb 14, 2023 |
| Centos_linux | — | Upgrade nssUpgrade nss-pkcs11-develUpgrade nss-develUpgrade nss-sysinitUpgrade nss-debuginfoUpgrade nss-tools | Feb 22, 2023 | Feb 20, 2023 |
| Debian | — | Upgrade thunderbirdUpgrade nssUpgrade firefox-esr | Feb 17, 2023 | Feb 17, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade www-client/firefox. | May 31, 2023 | May 30, 2023 |
| Mfsa2023 05 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 110.0 | Feb 16, 2023 | Feb 14, 2023 |
| Mfsa2023 06 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 102.8 | Feb 16, 2023 | Feb 14, 2023 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 102.8 | Feb 17, 2023 | Feb 15, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 9, 2024 |
| Oracle_linux | — | Upgrade nss-softokn-freebl-develUpgrade nss-develUpgrade nss-pkcs11-develUpgrade nss-util-develUpgrade firefox-x11Upgrade nspr-develUpgrade nss-softoknUpgrade nss-utilUpgrade nss-toolsUpgrade nss-softokn-freeblUpgrade firefoxUpgrade nssUpgrade nss-softokn-develUpgrade nsprUpgrade thunderbirdUpgrade nss-sysinit | Feb 21, 2023 | Feb 14, 2023 |
| Redhat_linux | — | Upgrade nss-softokn-freebl-debuginfoUpgrade nssUpgrade nspr-debuginfoUpgrade nss-util-debuginfoUpgrade nss-utilUpgrade nss-develUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-debuginfoUpgrade nss-softokn-freebl-develUpgrade nss-debuginfoUpgrade nss-sysinitUpgrade nss-softokn-freeblUpgrade nss-softokn-develUpgrade nss-util-develUpgrade nss-tools-debuginfoUpgrade nss-softoknUpgrade nsprUpgrade nspr-develUpgrade nss-toolsUpgrade nss-pkcs11-develUpgrade nss-debugsource | Feb 22, 2023 | Feb 20, 2023 |
| Rocky_linux | — | Upgrade nss-toolsUpgrade firefox-debugsourceUpgrade nss-util-debuginfoUpgrade nssUpgrade firefoxUpgrade nss-sysinitUpgrade nss-softoknUpgrade nss-util-develUpgrade firefox-x11Upgrade nss-sysinit-debuginfoUpgrade nss-debuginfoUpgrade nss-tools-debuginfoUpgrade thunderbird-debuginfoUpgrade nspr-develUpgrade nss-softokn-debuginfoUpgrade firefox-debuginfoUpgrade nss-softokn-freebl-develUpgrade nspr-debuginfoUpgrade nss-debugsourceUpgrade nss-utilUpgrade nss-softokn-freebl-debuginfoUpgrade nss-softokn-develUpgrade thunderbirdUpgrade nss-softokn-freeblUpgrade nss-develUpgrade nsprUpgrade thunderbird-debugsource | Mar 12, 2024 | Jun 2, 2023 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-sysinit-32bitUpgrade MozillaThunderbird-translations-commonUpgrade libsoftokn3Upgrade libsoftokn3-hmac-32bitUpgrade MozillaFirefoxUpgrade libsoftokn3-32bitUpgrade mozilla-nss-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-nss-develUpgrade MozillaFirefox-translations-otherUpgrade libsoftokn3-hmacUpgrade mozilla-nss-certs-32bitUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbirdUpgrade mozilla-nssUpgrade libfreebl3-hmacUpgrade mozilla-nss-certsUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-develUpgrade libfreebl3-hmac-32bitUpgrade libfreebl3Upgrade mozilla-nss-sysinit | Feb 17, 2023 | Feb 16, 2023 |
| Ubuntu | — | Upgrade libnss3 (Ubuntu Pro)Upgrade thunderbirdUpgrade firefoxUpgrade libnss3 | Mar 22, 2023 | Feb 20, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 2, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub