CVE-2021-23964 - Mozilla: Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7

Back Back to CVE browser

HIGH

Mozilla: Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7

Published Feb 26, 2021

8.8

HIGH

CVSS 3.1

EPSS 1.36%

Description

Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7.

Affected products

Vendor Mozilla Product Firefox Default
n/a
- Version
  < 85
  Status
  affected
  Constraints
  -
Vendor Mozilla Product Firefox ESR Default
n/a
- Version
  < 78.7
  Status
  affected
  Constraints
  -
Vendor Mozilla Product Thunderbird Default
n/a
- Version
  < 78.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mozilla

Firefox

n/a

Version	Status	Constraints
< 85	affected	-

Mozilla

Firefox ESR

n/a

Version	Status	Constraints
< 78.7	affected	-

Mozilla

Thunderbird

n/a

Version	Status	Constraints
< 78.7	affected	-

Red Hat Enterprise Linux 7

firefox-0:78.7.0-2.el7_9

Fixed · RHSA-2021:0290
Red Hat Enterprise Linux 7

thunderbird-0:78.7.0-1.el7_9

Fixed · RHSA-2021:0297
Red Hat Enterprise Linux 8

firefox-0:78.7.0-2.el8_3

Fixed · RHSA-2021:0288
Red Hat Enterprise Linux 8

thunderbird-0:78.7.0-1.el8_3

Fixed · RHSA-2021:0298
Red Hat Enterprise Linux 8.1 Extended Update Support

firefox-0:78.7.0-2.el8_1

Fixed · RHSA-2021:0285
Red Hat Enterprise Linux 8.1 Extended Update Support

thunderbird-0:78.7.0-1.el8_1

Fixed · RHSA-2021:0397
Red Hat Enterprise Linux 8.2 Extended Update Support

firefox-0:78.7.0-2.el8_2

Fixed · RHSA-2021:0289
Red Hat Enterprise Linux 8.2 Extended Update Support

thunderbird-0:78.7.0-1.el8_2

Fixed · RHSA-2021:0299
Red Hat Enterprise Linux 6

firefox

Out of support scope
Red Hat Enterprise Linux 6

thunderbird

Out of support scope

Product	Package	State	Advisory
Red Hat Enterprise Linux 7	firefox-0:78.7.0-2.el7_9	Fixed	RHSA-2021:0290
Red Hat Enterprise Linux 7	thunderbird-0:78.7.0-1.el7_9	Fixed	RHSA-2021:0297
Red Hat Enterprise Linux 8	firefox-0:78.7.0-2.el8_3	Fixed	RHSA-2021:0288
Red Hat Enterprise Linux 8	thunderbird-0:78.7.0-1.el8_3	Fixed	RHSA-2021:0298
Red Hat Enterprise Linux 8.1 Extended Update Support	firefox-0:78.7.0-2.el8_1	Fixed	RHSA-2021:0285
Red Hat Enterprise Linux 8.1 Extended Update Support	thunderbird-0:78.7.0-1.el8_1	Fixed	RHSA-2021:0397
Red Hat Enterprise Linux 8.2 Extended Update Support	firefox-0:78.7.0-2.el8_2	Fixed	RHSA-2021:0289
Red Hat Enterprise Linux 8.2 Extended Update Support	thunderbird-0:78.7.0-1.el8_2	Fixed	RHSA-2021:0299
Red Hat Enterprise Linux 6	firefox	Out of support scope	n/a
Red Hat Enterprise Linux 6	thunderbird	Out of support scope	n/a

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-120

Classic Buffer Overflow

CWE-787

Out-of-bounds Write

References (10)

https://access.redhat.com/security/cve/CVE-2021-23964
Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1662507%2C1666285%2C1673526%2C1674278%2C1674835%2C1675097%2C1675844%2C1675868%2C1677590%2C1677888%2C1680410%2C1681268%2C1682068%2C1682938%2C1683736%2C1685260%2C1685925
x_refsource_MISCBroken LinkIssue TrackingVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1920651
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-10885
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-23964
https://www.cve.org/CVERecord?id=CVE-2021-23964
https://www.mozilla.org/en-US/security/advisories/mfsa2021-04/#CVE-2021-23964
https://www.mozilla.org/security/advisories/mfsa2021-03/
x_refsource_MISCRelease NotesVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2021-04/
x_refsource_MISCRelease NotesVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2021-05/
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2021-23964		Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1662507%2C1666285%2C1673526%2C1674278%2C1674835%2C1675097%2C1675844%2C1675868%2C1677590%2C1677888%2C1680410%2C1681268%2C1682068%2C1682938%2C1683736%2C1685260%2C1685925		x_refsource_MISCBroken LinkIssue TrackingVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1920651		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-10885		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-23964
https://www.cve.org/CVERecord?id=CVE-2021-23964
https://www.mozilla.org/en-US/security/advisories/mfsa2021-04/#CVE-2021-23964
https://www.mozilla.org/security/advisories/mfsa2021-03/		x_refsource_MISCRelease NotesVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2021-04/		x_refsource_MISCRelease NotesVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2021-05/		x_refsource_MISCRelease NotesVendor Advisory