csaf_suse - suse-su-2023:4912-1

suse-su-2023:4912-1

Vulnerability from csaf_suse

Published

2023-12-19 15:48

Modified

2023-12-19 15:48

Summary

Security update for MozillaFirefox

Notes

Title of the patch

Security update for MozillaFirefox

Description of the patch

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 115.6.0 ESR changelog-entry (bsc#1217974) * CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver (bmo#1843782). * CVE-2023-6857: Symlinks may resolve to smaller than expected buffers (bmo#1796023). * CVE-2023-6858: Heap buffer overflow in nsTextFragment (bmo#1826791). * CVE-2023-6859: Use-after-free in PR_GetIdentitiesLayer (bmo#1840144). * CVE-2023-6860: Potential sandbox escape due to VideoBridge lack of texture validation (bmo#1854669). * CVE-2023-6861: Heap buffer overflow affected nsWindow::PickerOpen(void) in headless mode (bmo#1864118). * CVE-2023-6862: Use-after-free in nsDNSService (bsc#1868042). * CVE-2023-6863: Undefined behavior in ShutdownObserver() (bmo#1868901). * CVE-2023-6864: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. * CVE-2023-6865: Potential exposure of uninitialized data in EncryptingOutputStream (bmo#1864123). * CVE-2023-6867: Clickjacking permission prompts using the popup transition (bmo#1863863). - Fixed: Various security fixes and other quality improvements MFSA 2023-50 (bsc#1217230) * CVE-2023-6204 (bmo#1841050) Out-of-bound memory access in WebGL2 blitFramebuffer * CVE-2023-6205 (bmo#1854076) Use-after-free in MessagePort::Entangled * CVE-2023-6206 (bmo#1857430) Clickjacking permission prompts using the fullscreen transition * CVE-2023-6207 (bmo#1861344) Use-after-free in ReadableByteStreamQueueEntry::Buffer * CVE-2023-6208 (bmo#1855345) Using Selection API would copy contents into X11 primary selection. * CVE-2023-6209 (bmo#1858570) Incorrect parsing of relative URLs starting with '///' * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252, bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943, bmo#1862782) Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5

Patchnames

SUSE-2023-4912,SUSE-SLE-SDK-12-SP5-2023-4912,SUSE-SLE-SERVER-12-SP5-2023-4912

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaFirefox",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for MozillaFirefox fixes the following issues:\n\n- Firefox Extended Support Release 115.6.0 ESR changelog-entry (bsc#1217974)\n  * CVE-2023-6856: Heap-buffer-overflow affecting WebGL  DrawElementsInstanced method with Mesa VM driver (bmo#1843782).\n  * CVE-2023-6857: Symlinks may resolve to smaller than expected buffers (bmo#1796023).\n  * CVE-2023-6858: Heap buffer overflow in nsTextFragment (bmo#1826791).\n  * CVE-2023-6859: Use-after-free in PR_GetIdentitiesLayer (bmo#1840144).\n  * CVE-2023-6860: Potential sandbox escape due to VideoBridge lack of texture validation (bmo#1854669).\n  * CVE-2023-6861: Heap buffer overflow affected nsWindow::PickerOpen(void) in headless mode (bmo#1864118).\n  * CVE-2023-6862: Use-after-free in nsDNSService (bsc#1868042).\n  * CVE-2023-6863: Undefined behavior in ShutdownObserver() (bmo#1868901).\n  * CVE-2023-6864: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6.\n  * CVE-2023-6865: Potential exposure of uninitialized data in EncryptingOutputStream (bmo#1864123).\n  * CVE-2023-6867: Clickjacking permission prompts using the popup transition (bmo#1863863).\n    \n- Fixed: Various security fixes and other quality improvements MFSA 2023-50 (bsc#1217230)\n  * CVE-2023-6204 (bmo#1841050)\n    Out-of-bound memory access in WebGL2 blitFramebuffer\n  * CVE-2023-6205 (bmo#1854076)\n    Use-after-free in MessagePort::Entangled\n  * CVE-2023-6206 (bmo#1857430)\n    Clickjacking permission prompts using the fullscreen\n    transition\n  * CVE-2023-6207 (bmo#1861344)\n    Use-after-free in ReadableByteStreamQueueEntry::Buffer\n  * CVE-2023-6208 (bmo#1855345)\n    Using Selection API would copy contents into X11 primary\n    selection.\n  * CVE-2023-6209 (bmo#1858570)\n    Incorrect parsing of relative URLs starting with \u0027///\u0027\n  * CVE-2023-6212 (bmo#1658432, bmo#1820983, bmo#1829252,\n    bmo#1856072, bmo#1856091, bmo#1859030, bmo#1860943,\n    bmo#1862782)\n    Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5,\n    and Thunderbird 115.5",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2023-4912,SUSE-SLE-SDK-12-SP5-2023-4912,SUSE-SLE-SERVER-12-SP5-2023-4912",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_4912-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2023:4912-1",
        "url": "https://www.suse.com/support/update/announcement/2023/suse-su-20234912-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2023:4912-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-December/017449.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1217230",
        "url": "https://bugzilla.suse.com/1217230"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1217974",
        "url": "https://bugzilla.suse.com/1217974"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6204 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6204/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6205 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6205/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6206 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6206/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6207 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6207/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6208 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6208/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6209 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6209/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6212 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6212/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6856 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6856/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6857 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6857/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6858 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6858/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6859 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6859/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6860 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6860/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6861 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6861/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6862 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6862/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6863 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6863/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6864 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6864/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6865 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6865/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-6867 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-6867/"
      }
    ],
    "title": "Security update for MozillaFirefox",
    "tracking": {
      "current_release_date": "2023-12-19T15:48:50Z",
      "generator": {
        "date": "2023-12-19T15:48:50Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2023:4912-1",
      "initial_release_date": "2023-12-19T15:48:50Z",
      "revision_history": [
        {
          "date": "2023-12-19T15:48:50Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-115.6.0-112.194.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-115.6.0-112.194.1.aarch64",
                  "product_id": "MozillaFirefox-115.6.0-112.194.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-upstream-115.6.0-112.194.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-branding-upstream-115.6.0-112.194.1.aarch64",
                  "product_id": "MozillaFirefox-branding-upstream-115.6.0-112.194.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
                  "product_id": "MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-other-115.6.0-112.194.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-translations-other-115.6.0-112.194.1.aarch64",
                  "product_id": "MozillaFirefox-translations-other-115.6.0-112.194.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-115.6.0-112.194.1.noarch",
                "product": {
                  "name": "MozillaFirefox-devel-115.6.0-112.194.1.noarch",
                  "product_id": "MozillaFirefox-devel-115.6.0-112.194.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-115.6.0-112.194.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-115.6.0-112.194.1.ppc64le",
                  "product_id": "MozillaFirefox-115.6.0-112.194.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-upstream-115.6.0-112.194.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-branding-upstream-115.6.0-112.194.1.ppc64le",
                  "product_id": "MozillaFirefox-branding-upstream-115.6.0-112.194.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
                  "product_id": "MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-other-115.6.0-112.194.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-translations-other-115.6.0-112.194.1.ppc64le",
                  "product_id": "MozillaFirefox-translations-other-115.6.0-112.194.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-115.6.0-112.194.1.s390x",
                "product": {
                  "name": "MozillaFirefox-115.6.0-112.194.1.s390x",
                  "product_id": "MozillaFirefox-115.6.0-112.194.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-upstream-115.6.0-112.194.1.s390x",
                "product": {
                  "name": "MozillaFirefox-branding-upstream-115.6.0-112.194.1.s390x",
                  "product_id": "MozillaFirefox-branding-upstream-115.6.0-112.194.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
                "product": {
                  "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
                  "product_id": "MozillaFirefox-translations-common-115.6.0-112.194.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-other-115.6.0-112.194.1.s390x",
                "product": {
                  "name": "MozillaFirefox-translations-other-115.6.0-112.194.1.s390x",
                  "product_id": "MozillaFirefox-translations-other-115.6.0-112.194.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-115.6.0-112.194.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-115.6.0-112.194.1.x86_64",
                  "product_id": "MozillaFirefox-115.6.0-112.194.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-branding-upstream-115.6.0-112.194.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-branding-upstream-115.6.0-112.194.1.x86_64",
                  "product_id": "MozillaFirefox-branding-upstream-115.6.0-112.194.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
                  "product_id": "MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-other-115.6.0-112.194.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-translations-other-115.6.0-112.194.1.x86_64",
                  "product_id": "MozillaFirefox-translations-other-115.6.0-112.194.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-115.6.0-112.194.1.noarch as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        },
        "product_reference": "MozillaFirefox-devel-115.6.0-112.194.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-115.6.0-112.194.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64"
        },
        "product_reference": "MozillaFirefox-115.6.0-112.194.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-115.6.0-112.194.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-115.6.0-112.194.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-115.6.0-112.194.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x"
        },
        "product_reference": "MozillaFirefox-115.6.0-112.194.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-115.6.0-112.194.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64"
        },
        "product_reference": "MozillaFirefox-115.6.0-112.194.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-115.6.0-112.194.1.noarch as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        },
        "product_reference": "MozillaFirefox-devel-115.6.0-112.194.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64"
        },
        "product_reference": "MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-115.6.0-112.194.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64"
        },
        "product_reference": "MozillaFirefox-115.6.0-112.194.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-115.6.0-112.194.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-115.6.0-112.194.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-115.6.0-112.194.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x"
        },
        "product_reference": "MozillaFirefox-115.6.0-112.194.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-115.6.0-112.194.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64"
        },
        "product_reference": "MozillaFirefox-115.6.0-112.194.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-115.6.0-112.194.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        },
        "product_reference": "MozillaFirefox-devel-115.6.0-112.194.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64"
        },
        "product_reference": "MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-6204",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6204"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "On some systems\u2014depending on the graphics settings and drivers\u2014it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6204",
          "url": "https://www.suse.com/security/cve/CVE-2023-6204"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217230 for CVE-2023-6204",
          "url": "https://bugzilla.suse.com/1217230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6204"
    },
    {
      "cve": "CVE-2023-6205",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6205"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6205",
          "url": "https://www.suse.com/security/cve/CVE-2023-6205"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217230 for CVE-2023-6205",
          "url": "https://bugzilla.suse.com/1217230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6205"
    },
    {
      "cve": "CVE-2023-6206",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6206"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6206",
          "url": "https://www.suse.com/security/cve/CVE-2023-6206"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217230 for CVE-2023-6206",
          "url": "https://bugzilla.suse.com/1217230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6206"
    },
    {
      "cve": "CVE-2023-6207",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6207"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6207",
          "url": "https://www.suse.com/security/cve/CVE-2023-6207"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217230 for CVE-2023-6207",
          "url": "https://bugzilla.suse.com/1217230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6207"
    },
    {
      "cve": "CVE-2023-6208",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6208"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard.\n*This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6208",
          "url": "https://www.suse.com/security/cve/CVE-2023-6208"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217230 for CVE-2023-6208",
          "url": "https://bugzilla.suse.com/1217230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6208"
    },
    {
      "cve": "CVE-2023-6209",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6209"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal \"/../\" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6209",
          "url": "https://www.suse.com/security/cve/CVE-2023-6209"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217230 for CVE-2023-6209",
          "url": "https://bugzilla.suse.com/1217230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6209"
    },
    {
      "cve": "CVE-2023-6212",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6212"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6212",
          "url": "https://www.suse.com/security/cve/CVE-2023-6212"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217230 for CVE-2023-6212",
          "url": "https://bugzilla.suse.com/1217230"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6212"
    },
    {
      "cve": "CVE-2023-6856",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6856"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver.  This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6856",
          "url": "https://www.suse.com/security/cve/CVE-2023-6856"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217974 for CVE-2023-6856",
          "url": "https://bugzilla.suse.com/1217974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6856"
    },
    {
      "cve": "CVE-2023-6857",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6857"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary. \n*This bug only affects Firefox on Unix-based operating systems (Android, Linux, MacOS). Windows is unaffected.* This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6857",
          "url": "https://www.suse.com/security/cve/CVE-2023-6857"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217974 for CVE-2023-6857",
          "url": "https://bugzilla.suse.com/1217974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6857"
    },
    {
      "cve": "CVE-2023-6858",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6858"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6858",
          "url": "https://www.suse.com/security/cve/CVE-2023-6858"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217974 for CVE-2023-6858",
          "url": "https://bugzilla.suse.com/1217974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6858"
    },
    {
      "cve": "CVE-2023-6859",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6859"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6859",
          "url": "https://www.suse.com/security/cve/CVE-2023-6859"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217974 for CVE-2023-6859",
          "url": "https://bugzilla.suse.com/1217974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6859"
    },
    {
      "cve": "CVE-2023-6860",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6860"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The `VideoBridge` allowed any content process to use textures produced by remote decoders.  This could be abused to escape the sandbox. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6860",
          "url": "https://www.suse.com/security/cve/CVE-2023-6860"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217974 for CVE-2023-6860",
          "url": "https://bugzilla.suse.com/1217974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6860"
    },
    {
      "cve": "CVE-2023-6861",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6861"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6861",
          "url": "https://www.suse.com/security/cve/CVE-2023-6861"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217974 for CVE-2023-6861",
          "url": "https://bugzilla.suse.com/1217974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6861"
    },
    {
      "cve": "CVE-2023-6862",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6862"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free was identified in the `nsDNSService::Init`.  This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR \u003c 115.6 and Thunderbird \u003c 115.6.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6862",
          "url": "https://www.suse.com/security/cve/CVE-2023-6862"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217974 for CVE-2023-6862",
          "url": "https://bugzilla.suse.com/1217974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6862"
    },
    {
      "cve": "CVE-2023-6863",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6863"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6863",
          "url": "https://www.suse.com/security/cve/CVE-2023-6863"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217974 for CVE-2023-6863",
          "url": "https://bugzilla.suse.com/1217974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6863"
    },
    {
      "cve": "CVE-2023-6864",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6864"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6864",
          "url": "https://www.suse.com/security/cve/CVE-2023-6864"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217974 for CVE-2023-6864",
          "url": "https://bugzilla.suse.com/1217974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6864"
    },
    {
      "cve": "CVE-2023-6865",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6865"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "`EncryptingOutputStream` was susceptible to exposing uninitialized data.  This issue could only be abused in order to write data to a local disk which may have implications for private browsing mode. This vulnerability affects Firefox ESR \u003c 115.6 and Firefox \u003c 121.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6865",
          "url": "https://www.suse.com/security/cve/CVE-2023-6865"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217974 for CVE-2023-6865",
          "url": "https://bugzilla.suse.com/1217974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6865"
    },
    {
      "cve": "CVE-2023-6867",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-6867"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox ESR \u003c 115.6 and Firefox \u003c 121.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-6867",
          "url": "https://www.suse.com/security/cve/CVE-2023-6867"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217974 for CVE-2023-6867",
          "url": "https://bugzilla.suse.com/1217974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox-translations-common-115.6.0-112.194.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel-115.6.0-112.194.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-12-19T15:48:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2023-6867"
    }
  ]
}

CVE-2023-6859 (GCVE-0-2023-6859)

Vulnerability from cvelistv5

Published

2023-12-19 13:38

Modified

2025-02-13 17:26

Severity ?

CWE

Use-after-free in PR_GetIdentitiesLayer

Summary

A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1840144
	https://www.mozilla.org/security/advisories/mfsa2023-54/
	https://www.mozilla.org/security/advisories/mfsa2023-55/
	https://www.mozilla.org/security/advisories/mfsa2023-56/
	https://www.debian.org/security/2023/dsa-5581
	https://www.debian.org/security/2023/dsa-5582
	https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html
	https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html
	https://security.gentoo.org/glsa/202401-10

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox ESR

Version: unspecified < 115.6

	Mozilla	Thunderbird	Version: unspecified < 115.6
	Mozilla	Firefox	Version: unspecified < 121

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:42:07.643Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1840144"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5581"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5582"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "121",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Irvan Kurniawan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
            }
          ],
          "value": "A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in PR_GetIdentitiesLayer",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-07T11:07:19.070Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1840144"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-10"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6859",
    "datePublished": "2023-12-19T13:38:39.872Z",
    "dateReserved": "2023-12-15T17:42:55.537Z",
    "dateUpdated": "2025-02-13T17:26:35.464Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6867 (GCVE-0-2023-6867)

Vulnerability from cvelistv5

Published

2023-12-19 13:38

Modified

2025-02-13 17:26

Severity ?

CWE

Clickjacking permission prompts using the popup transition

Summary

The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox ESR < 115.6 and Firefox < 121.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1863863
	https://www.mozilla.org/security/advisories/mfsa2023-54/
	https://www.mozilla.org/security/advisories/mfsa2023-56/
	https://www.debian.org/security/2023/dsa-5581
	https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html
	https://security.gentoo.org/glsa/202401-10

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox ESR

Version: unspecified < 115.6

Mozilla

Firefox

Version: unspecified < 121

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:42:08.219Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1863863"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5581"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-6867",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-27T18:50:04.078453Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-27T18:51:47.350Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "121",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Hafiizh"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox ESR \u003c 115.6 and Firefox \u003c 121."
            }
          ],
          "value": "The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox ESR \u003c 115.6 and Firefox \u003c 121."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Clickjacking permission prompts using the popup transition",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-07T11:07:34.550Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1863863"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-10"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6867",
    "datePublished": "2023-12-19T13:38:49.592Z",
    "dateReserved": "2023-12-15T17:42:57.114Z",
    "dateUpdated": "2025-02-13T17:26:39.927Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6206 (GCVE-0-2023-6206)

Vulnerability from cvelistv5

Published

2023-11-21 14:28

Modified

2025-02-13 17:26

Severity ?

CWE

Clickjacking permission prompts using the fullscreen transition

Summary

The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1857430
	https://www.mozilla.org/security/advisories/mfsa2023-49/
	https://www.mozilla.org/security/advisories/mfsa2023-50/
	https://www.mozilla.org/security/advisories/mfsa2023-52/
	https://www.debian.org/security/2023/dsa-5561
	https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html
	https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 120

	Mozilla	Firefox ESR	Version: unspecified < 115.5.0
	Mozilla	Thunderbird	Version: unspecified < 115.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:21:17.996Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1857430"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5561"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "120",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Hafiizh"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
            }
          ],
          "value": "The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Clickjacking permission prompts using the fullscreen transition",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-30T16:06:19.875Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1857430"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6206",
    "datePublished": "2023-11-21T14:28:52.832Z",
    "dateReserved": "2023-11-20T13:33:29.870Z",
    "dateUpdated": "2025-02-13T17:26:10.493Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6205 (GCVE-0-2023-6205)

Vulnerability from cvelistv5

Published

2023-11-21 14:28

Modified

2025-02-13 17:26

Severity ?

CWE

Use-after-free in MessagePort::Entangled

Summary

It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1854076
	https://www.mozilla.org/security/advisories/mfsa2023-49/
	https://www.mozilla.org/security/advisories/mfsa2023-50/
	https://www.mozilla.org/security/advisories/mfsa2023-52/
	https://www.debian.org/security/2023/dsa-5561
	https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html
	https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 120

	Mozilla	Firefox ESR	Version: unspecified < 115.5.0
	Mozilla	Thunderbird	Version: unspecified < 115.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:21:17.921Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1854076"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5561"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-6205",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-25T19:19:02.817205Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-25T19:19:11.815Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "120",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Yangkang of 360 ATA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
            }
          ],
          "value": "It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in MessagePort::Entangled",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-30T16:06:14.313Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1854076"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6205",
    "datePublished": "2023-11-21T14:28:52.504Z",
    "dateReserved": "2023-11-20T13:33:24.421Z",
    "dateUpdated": "2025-02-13T17:26:09.949Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6864 (GCVE-0-2023-6864)

Vulnerability from cvelistv5

Published

2023-12-19 13:38

Modified

2024-08-02 08:42

Severity ?

CWE

Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6

Summary

Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

References

►

URL

Tags

	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1736385%2C1810805%2C1846328%2C1856090%2C1858033%2C1858509%2C1862089%2C1862777%2C1864015
	https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html
	https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html
	https://security.gentoo.org/glsa/202401-10
	https://www.debian.org/security/2023/dsa-5581
	https://www.debian.org/security/2023/dsa-5582
	https://www.mozilla.org/security/advisories/mfsa2023-54/
	https://www.mozilla.org/security/advisories/mfsa2023-55/
	https://www.mozilla.org/security/advisories/mfsa2023-56/

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox ESR

Version: unspecified < 115.6

	Mozilla	Thunderbird	Version: unspecified < 115.6
	Mozilla	Firefox	Version: unspecified < 121

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:42:07.641Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6",
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1736385%2C1810805%2C1846328%2C1856090%2C1858033%2C1858509%2C1862089%2C1862777%2C1864015"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5581"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5582"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "121",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Andrew McCreight, Karl Tomlinson, Valentin Gosu, Randell Jesup, Yury Delendik, and the Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
            }
          ],
          "value": "Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-30T19:16:40.729Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1736385%2C1810805%2C1846328%2C1856090%2C1858033%2C1858509%2C1862089%2C1862777%2C1864015"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6864",
    "datePublished": "2023-12-19T13:38:45.300Z",
    "dateReserved": "2023-12-15T17:42:56.544Z",
    "dateUpdated": "2024-08-02T08:42:07.641Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6856 (GCVE-0-2023-6856)

Vulnerability from cvelistv5

Published

2023-12-19 13:38

Modified

2025-02-13 17:26

Severity ?

CWE

Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver

Summary

The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1843782
	https://www.mozilla.org/security/advisories/mfsa2023-54/
	https://www.mozilla.org/security/advisories/mfsa2023-55/
	https://www.mozilla.org/security/advisories/mfsa2023-56/
	https://www.debian.org/security/2023/dsa-5581
	https://www.debian.org/security/2023/dsa-5582
	https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html
	https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html
	https://security.gentoo.org/glsa/202401-10

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox ESR

Version: unspecified < 115.6

	Mozilla	Thunderbird	Version: unspecified < 115.6
	Mozilla	Firefox	Version: unspecified < 121

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:42:08.187Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843782"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5581"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5582"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "121",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "DoHyun Lee"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The WebGL \u003ccode\u003eDrawElementsInstanced\u003c/code\u003e method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver.  This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
            }
          ],
          "value": "The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver.  This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-07T11:06:56.120Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843782"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-10"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6856",
    "datePublished": "2023-12-19T13:38:36.493Z",
    "dateReserved": "2023-12-15T17:42:54.919Z",
    "dateUpdated": "2025-02-13T17:26:33.802Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6860 (GCVE-0-2023-6860)

Vulnerability from cvelistv5

Published

2023-12-19 13:38

Modified

2025-02-13 17:26

Severity ?

CWE

Potential sandbox escape due to VideoBridge lack of texture validation

Summary

The `VideoBridge` allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1854669
	https://www.mozilla.org/security/advisories/mfsa2023-54/
	https://www.mozilla.org/security/advisories/mfsa2023-55/
	https://www.mozilla.org/security/advisories/mfsa2023-56/
	https://www.debian.org/security/2023/dsa-5581
	https://www.debian.org/security/2023/dsa-5582
	https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html
	https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html
	https://security.gentoo.org/glsa/202401-10

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox ESR

Version: unspecified < 115.6

	Mozilla	Thunderbird	Version: unspecified < 115.6
	Mozilla	Firefox	Version: unspecified < 121

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:42:07.916Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1854669"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5581"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5582"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "121",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Andrew Osmond"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The \u003ccode\u003eVideoBridge\u003c/code\u003e allowed any content process to use textures produced by remote decoders.  This could be abused to escape the sandbox. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
            }
          ],
          "value": "The `VideoBridge` allowed any content process to use textures produced by remote decoders.  This could be abused to escape the sandbox. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Potential sandbox escape due to VideoBridge lack of texture validation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-07T11:07:42.632Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1854669"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-10"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6860",
    "datePublished": "2023-12-19T13:38:40.956Z",
    "dateReserved": "2023-12-15T17:42:55.731Z",
    "dateUpdated": "2025-02-13T17:26:36.069Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6862 (GCVE-0-2023-6862)

Vulnerability from cvelistv5

Published

2023-12-19 13:38

Modified

2025-02-13 17:26

Severity ?

CWE

Use-after-free in nsDNSService

Summary

A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR < 115.6 and Thunderbird < 115.6.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1868042
	https://www.mozilla.org/security/advisories/mfsa2023-54/
	https://www.mozilla.org/security/advisories/mfsa2023-55/
	https://www.debian.org/security/2023/dsa-5581
	https://www.debian.org/security/2023/dsa-5582
	https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html
	https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html
	https://security.gentoo.org/glsa/202401-10

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox ESR

Version: unspecified < 115.6

Mozilla

Thunderbird

Version: unspecified < 115.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:42:08.103Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1868042"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5581"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5582"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-6862",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-01-12T20:20:08.739941Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-25T19:18:21.412Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Randell Jesup"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A use-after-free was identified in the \u003ccode\u003ensDNSService::Init\u003c/code\u003e.  This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR \u003c 115.6 and Thunderbird \u003c 115.6."
            }
          ],
          "value": "A use-after-free was identified in the `nsDNSService::Init`.  This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR \u003c 115.6 and Thunderbird \u003c 115.6."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in nsDNSService",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-07T11:07:08.929Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1868042"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-10"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6862",
    "datePublished": "2023-12-19T13:38:43.100Z",
    "dateReserved": "2023-12-15T17:42:56.130Z",
    "dateUpdated": "2025-02-13T17:26:37.198Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6208 (GCVE-0-2023-6208)

Vulnerability from cvelistv5

Published

2023-11-21 14:28

Modified

2025-02-13 17:26

Severity ?

CWE

Using Selection API would copy contents into X11 primary selection.

Summary

When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1855345
	https://www.mozilla.org/security/advisories/mfsa2023-49/
	https://www.mozilla.org/security/advisories/mfsa2023-50/
	https://www.mozilla.org/security/advisories/mfsa2023-52/
	https://www.debian.org/security/2023/dsa-5561
	https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html
	https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 120

	Mozilla	Firefox ESR	Version: unspecified < 115.5.0
	Mozilla	Thunderbird	Version: unspecified < 115.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:21:18.095Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1855345"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5561"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "120",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "turistu"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard.\u003cbr\u003e*This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
            }
          ],
          "value": "When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard.\n*This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Using Selection API would copy contents into X11 primary selection.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-30T16:06:21.774Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1855345"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6208",
    "datePublished": "2023-11-21T14:28:53.494Z",
    "dateReserved": "2023-11-20T13:33:36.430Z",
    "dateUpdated": "2025-02-13T17:26:11.625Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6212 (GCVE-0-2023-6212)

Vulnerability from cvelistv5

Published

2023-11-21 14:28

Modified

2025-02-13 17:26

Severity ?

CWE

Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5

Summary

Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

References

►

URL

Tags

	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1658432%2C1820983%2C1829252%2C1856072%2C1856091%2C1859030%2C1860943%2C1862782
	https://www.mozilla.org/security/advisories/mfsa2023-49/
	https://www.mozilla.org/security/advisories/mfsa2023-50/
	https://www.mozilla.org/security/advisories/mfsa2023-52/
	https://www.debian.org/security/2023/dsa-5561
	https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html
	https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 120

	Mozilla	Firefox ESR	Version: unspecified < 115.5.0
	Mozilla	Thunderbird	Version: unspecified < 115.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:21:17.943Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5",
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1658432%2C1820983%2C1829252%2C1856072%2C1856091%2C1859030%2C1860943%2C1862782"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5561"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-6212",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-11-22T18:37:05.256775Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-29T20:32:05.944Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "120",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Mozilla Developers"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
            }
          ],
          "value": "Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-30T16:06:23.633Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1658432%2C1820983%2C1829252%2C1856072%2C1856091%2C1859030%2C1860943%2C1862782"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6212",
    "datePublished": "2023-11-21T14:28:54.749Z",
    "dateReserved": "2023-11-20T13:33:43.683Z",
    "dateUpdated": "2025-02-13T17:26:14.068Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6863 (GCVE-0-2023-6863)

Vulnerability from cvelistv5

Published

2023-12-19 13:38

Modified

2025-02-13 17:26

Severity ?

CWE

Undefined behavior in ShutdownObserver()

Summary

The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1868901
	https://www.mozilla.org/security/advisories/mfsa2023-54/
	https://www.mozilla.org/security/advisories/mfsa2023-55/
	https://www.mozilla.org/security/advisories/mfsa2023-56/
	https://www.debian.org/security/2023/dsa-5581
	https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html
	https://security.gentoo.org/glsa/202401-10

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox ESR

Version: unspecified < 115.6

	Mozilla	Thunderbird	Version: unspecified < 115.6
	Mozilla	Firefox	Version: unspecified < 121

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:42:08.504Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1868901"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5581"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "121",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ronald Crane"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The \u003ccode\u003eShutdownObserver()\u003c/code\u003e was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
            }
          ],
          "value": "The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Undefined behavior in ShutdownObserver()",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-07T11:06:35.621Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1868901"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-10"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6863",
    "datePublished": "2023-12-19T13:38:44.181Z",
    "dateReserved": "2023-12-15T17:42:56.329Z",
    "dateUpdated": "2025-02-13T17:26:37.799Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6207 (GCVE-0-2023-6207)

Vulnerability from cvelistv5

Published

2023-11-21 14:28

Modified

2025-02-13 17:26

Severity ?

CWE

Use-after-free in ReadableByteStreamQueueEntry::Buffer

Summary

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1861344
	https://www.mozilla.org/security/advisories/mfsa2023-49/
	https://www.mozilla.org/security/advisories/mfsa2023-50/
	https://www.mozilla.org/security/advisories/mfsa2023-52/
	https://www.debian.org/security/2023/dsa-5561
	https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html
	https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 120

	Mozilla	Firefox ESR	Version: unspecified < 115.5.0
	Mozilla	Thunderbird	Version: unspecified < 115.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:21:18.026Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1861344"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5561"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "120",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Yangkang of 360 ATA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
            }
          ],
          "value": "Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in ReadableByteStreamQueueEntry::Buffer",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-30T16:06:18.070Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1861344"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6207",
    "datePublished": "2023-11-21T14:28:53.190Z",
    "dateReserved": "2023-11-20T13:33:34.297Z",
    "dateUpdated": "2025-02-13T17:26:11.085Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6865 (GCVE-0-2023-6865)

Vulnerability from cvelistv5

Published

2023-12-19 13:38

Modified

2025-02-13 17:26

Severity ?

CWE

Potential exposure of uninitialized data in EncryptingOutputStream

Summary

`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only be abused in order to write data to a local disk which may have implications for private browsing mode. This vulnerability affects Firefox ESR < 115.6 and Firefox < 121.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1864123
	https://www.mozilla.org/security/advisories/mfsa2023-54/
	https://www.mozilla.org/security/advisories/mfsa2023-56/
	https://www.debian.org/security/2023/dsa-5581
	https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html
	https://security.gentoo.org/glsa/202401-10

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox ESR

Version: unspecified < 115.6

Mozilla

Firefox

Version: unspecified < 121

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:42:07.851Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1864123"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5581"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "121",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jan Varga"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ccode\u003eEncryptingOutputStream\u003c/code\u003e was susceptible to exposing uninitialized data.  This issue could only be abused in order to write data to a local disk which may have implications for private browsing mode. This vulnerability affects Firefox ESR \u003c 115.6 and Firefox \u003c 121."
            }
          ],
          "value": "`EncryptingOutputStream` was susceptible to exposing uninitialized data.  This issue could only be abused in order to write data to a local disk which may have implications for private browsing mode. This vulnerability affects Firefox ESR \u003c 115.6 and Firefox \u003c 121."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Potential exposure of uninitialized data in EncryptingOutputStream",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-07T11:08:03.932Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1864123"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-10"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6865",
    "datePublished": "2023-12-19T13:38:47.449Z",
    "dateReserved": "2023-12-15T17:42:56.728Z",
    "dateUpdated": "2025-02-13T17:26:38.713Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6861 (GCVE-0-2023-6861)

Vulnerability from cvelistv5

Published

2023-12-19 13:38

Modified

2025-02-13 17:26

Severity ?

CWE

Heap buffer overflow affected nsWindow::PickerOpen(void) in headless mode

Summary

The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1864118
	https://www.mozilla.org/security/advisories/mfsa2023-54/
	https://www.mozilla.org/security/advisories/mfsa2023-55/
	https://www.mozilla.org/security/advisories/mfsa2023-56/
	https://www.debian.org/security/2023/dsa-5581
	https://www.debian.org/security/2023/dsa-5582
	https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html
	https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html
	https://security.gentoo.org/glsa/202401-10

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox ESR

Version: unspecified < 115.6

	Mozilla	Thunderbird	Version: unspecified < 115.6
	Mozilla	Firefox	Version: unspecified < 121

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:42:07.994Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1864118"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5581"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5582"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "121",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Yangkang of 360 ATA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The \u003ccode\u003ensWindow::PickerOpen(void)\u003c/code\u003e method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
            }
          ],
          "value": "The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Heap buffer overflow affected nsWindow::PickerOpen(void) in headless mode",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-07T11:07:32.492Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1864118"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-10"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6861",
    "datePublished": "2023-12-19T13:38:42.037Z",
    "dateReserved": "2023-12-15T17:42:55.948Z",
    "dateUpdated": "2025-02-13T17:26:36.616Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6204 (GCVE-0-2023-6204)

Vulnerability from cvelistv5

Published

2023-11-21 14:28

Modified

2025-02-13 17:26

Severity ?

CWE

Out-of-bound memory access in WebGL2 blitFramebuffer

Summary

On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1841050
	https://www.mozilla.org/security/advisories/mfsa2023-49/
	https://www.mozilla.org/security/advisories/mfsa2023-50/
	https://www.mozilla.org/security/advisories/mfsa2023-52/
	https://www.debian.org/security/2023/dsa-5561
	https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html
	https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 120

	Mozilla	Firefox ESR	Version: unspecified < 115.5.0
	Mozilla	Thunderbird	Version: unspecified < 115.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:21:18.099Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1841050"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5561"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "120",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "JSec of Hayyim Security"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "On some systems\u2014depending on the graphics settings and drivers\u2014it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
            }
          ],
          "value": "On some systems\u2014depending on the graphics settings and drivers\u2014it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bound memory access in WebGL2 blitFramebuffer",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-30T16:06:25.477Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1841050"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6204",
    "datePublished": "2023-11-21T14:28:52.188Z",
    "dateReserved": "2023-11-20T13:33:20.318Z",
    "dateUpdated": "2025-02-13T17:26:09.300Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6857 (GCVE-0-2023-6857)

Vulnerability from cvelistv5

Published

2023-12-19 13:38

Modified

2025-02-13 17:26

Severity ?

CWE

Symlinks may resolve to smaller than expected buffers

Summary

When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary. *This bug only affects Firefox on Unix-based operating systems (Android, Linux, MacOS). Windows is unaffected.* This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1796023
	https://www.mozilla.org/security/advisories/mfsa2023-54/
	https://www.mozilla.org/security/advisories/mfsa2023-55/
	https://www.mozilla.org/security/advisories/mfsa2023-56/
	https://www.debian.org/security/2023/dsa-5581
	https://www.debian.org/security/2023/dsa-5582
	https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html
	https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html
	https://security.gentoo.org/glsa/202401-10

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox ESR

Version: unspecified < 115.6

	Mozilla	Thunderbird	Version: unspecified < 115.6
	Mozilla	Firefox	Version: unspecified < 121

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:42:07.598Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1796023"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5581"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5582"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "121",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jed Davis"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "When resolving a symlink, a race may occur where the buffer passed to \u003ccode\u003ereadlink\u003c/code\u003e may actually be smaller than necessary. \u003cbr\u003e*This bug only affects Firefox on Unix-based operating systems (Android, Linux, MacOS). Windows is unaffected.* This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
            }
          ],
          "value": "When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary. \n*This bug only affects Firefox on Unix-based operating systems (Android, Linux, MacOS). Windows is unaffected.* This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Symlinks may resolve to smaller than expected buffers",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-07T11:07:44.508Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1796023"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-10"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6857",
    "datePublished": "2023-12-19T13:38:37.621Z",
    "dateReserved": "2023-12-15T17:42:55.146Z",
    "dateUpdated": "2025-02-13T17:26:34.338Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6858 (GCVE-0-2023-6858)

Vulnerability from cvelistv5

Published

2023-12-19 13:38

Modified

2025-05-07 20:25

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Heap buffer overflow in nsTextFragment

Summary

Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1826791
	https://www.mozilla.org/security/advisories/mfsa2023-54/
	https://www.mozilla.org/security/advisories/mfsa2023-55/
	https://www.mozilla.org/security/advisories/mfsa2023-56/
	https://www.debian.org/security/2023/dsa-5581
	https://www.debian.org/security/2023/dsa-5582
	https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html
	https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html
	https://security.gentoo.org/glsa/202401-10

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox ESR

Version: unspecified < 115.6

	Mozilla	Thunderbird	Version: unspecified < 115.6
	Mozilla	Firefox	Version: unspecified < 121

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:42:07.449Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1826791"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5581"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5582"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-6858",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-07T20:24:54.198215Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-07T20:25:21.051Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "121",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Irvan Kurniawan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Firefox was susceptible to a heap buffer overflow in \u003ccode\u003ensTextFragment\u003c/code\u003e due to insufficient OOM handling. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
            }
          ],
          "value": "Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerability affects Firefox ESR \u003c 115.6, Thunderbird \u003c 115.6, and Firefox \u003c 121."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Heap buffer overflow in nsTextFragment",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-07T11:06:32.345Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1826791"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-10"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6858",
    "datePublished": "2023-12-19T13:38:38.757Z",
    "dateReserved": "2023-12-15T17:42:55.349Z",
    "dateUpdated": "2025-05-07T20:25:21.051Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-6209 (GCVE-0-2023-6209)

Vulnerability from cvelistv5

Published

2023-11-21 14:28

Modified

2025-02-13 17:26

Severity ?

CWE

Incorrect parsing of relative URLs starting with "///"

Summary

Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1858570
	https://www.mozilla.org/security/advisories/mfsa2023-49/
	https://www.mozilla.org/security/advisories/mfsa2023-50/
	https://www.mozilla.org/security/advisories/mfsa2023-52/
	https://www.debian.org/security/2023/dsa-5561
	https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html
	https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 120

	Mozilla	Firefox ESR	Version: unspecified < 115.5.0
	Mozilla	Thunderbird	Version: unspecified < 115.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:21:17.907Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1858570"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5561"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "120",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "115.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Rachmat Abdul Rokhim"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal \"/../\" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
            }
          ],
          "value": "Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal \"/../\" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox \u003c 120, Firefox ESR \u003c 115.5.0, and Thunderbird \u003c 115.5."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Incorrect parsing of relative URLs starting with \"///\"",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-30T16:06:16.133Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1858570"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-6209",
    "datePublished": "2023-11-21T14:28:53.787Z",
    "dateReserved": "2023-11-20T13:33:38.038Z",
    "dateUpdated": "2025-02-13T17:26:12.209Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2023:4912-1

Vulnerability from csaf_suse

CVE-2023-6859 (GCVE-0-2023-6859)

Vulnerability from cvelistv5

CVE-2023-6867 (GCVE-0-2023-6867)

Vulnerability from cvelistv5

CVE-2023-6206 (GCVE-0-2023-6206)

Vulnerability from cvelistv5

CVE-2023-6205 (GCVE-0-2023-6205)

Vulnerability from cvelistv5

CVE-2023-6864 (GCVE-0-2023-6864)

Vulnerability from cvelistv5

CVE-2023-6856 (GCVE-0-2023-6856)

Vulnerability from cvelistv5

CVE-2023-6860 (GCVE-0-2023-6860)

Vulnerability from cvelistv5

CVE-2023-6862 (GCVE-0-2023-6862)

Vulnerability from cvelistv5

CVE-2023-6208 (GCVE-0-2023-6208)

Vulnerability from cvelistv5

CVE-2023-6212 (GCVE-0-2023-6212)

Vulnerability from cvelistv5

CVE-2023-6863 (GCVE-0-2023-6863)

Vulnerability from cvelistv5

CVE-2023-6207 (GCVE-0-2023-6207)

Vulnerability from cvelistv5

CVE-2023-6865 (GCVE-0-2023-6865)

Vulnerability from cvelistv5

CVE-2023-6861 (GCVE-0-2023-6861)

Vulnerability from cvelistv5

CVE-2023-6204 (GCVE-0-2023-6204)

Vulnerability from cvelistv5

CVE-2023-6857 (GCVE-0-2023-6857)

Vulnerability from cvelistv5

CVE-2023-6858 (GCVE-0-2023-6858)

Vulnerability from cvelistv5

CVE-2023-6209 (GCVE-0-2023-6209)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature