vulnerability

Rocky Linux: CVE-2023-4583: thunderbird (Multiple Advisories)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:C/A:N)

Published

Sep 11, 2023

Added

Mar 5, 2024

Modified

Mar 31, 2026

Description

When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.

Solutions

rocky-upgrade-firefoxrocky-upgrade-firefox-debuginforocky-upgrade-firefox-debugsourcerocky-upgrade-thunderbirdrocky-upgrade-thunderbird-debuginforocky-upgrade-thunderbird-debugsource

References

CVE-2023-4583
https://attackerkb.com/topics/CVE-2023-4583
CWE-754
EUVD-EUVD-2023-54437
https://errata.rockylinux.org/RLSA-2023:4952
https://errata.rockylinux.org/RLSA-2023:4954
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54437

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report