CVE-2023-25752 - Mozilla: Potential out-of-bounds when accessing throttled streams

Back Back to CVE browser

MEDIUM

Mozilla: Potential out-of-bounds when accessing throttled streams

Published Jun 2, 2023

6.5

MEDIUM

CVSS 3.1

EPSS 0.61%

Description

When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

Affected products

Vendor Mozilla Product Firefox Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <111
Vendor Mozilla Product Firefox ESR Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <102.9
Vendor Mozilla Product Thunderbird Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <102.9

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mozilla

Firefox

n/a

Version	Status	Constraints
unspecified	affected	<111

Mozilla

Firefox ESR

n/a

Version	Status	Constraints
unspecified	affected	<102.9

Mozilla

Thunderbird

n/a

Version	Status	Constraints
unspecified	affected	<102.9

Red Hat Enterprise Linux 7

firefox-0:102.9.0-3.el7_9

Fixed · RHSA-2023:1333
Red Hat Enterprise Linux 7

thunderbird-0:102.9.0-1.el7_9

Fixed · RHSA-2023:1401
Red Hat Enterprise Linux 8

firefox-0:102.9.0-3.el8_7

Fixed · RHSA-2023:1336
Red Hat Enterprise Linux 8

thunderbird-0:102.9.0-1.el8_7

Fixed · RHSA-2023:1403
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions

firefox-0:102.9.0-4.el8_1

Fixed · RHSA-2023:1479
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions

thunderbird-0:102.9.0-2.el8_1

Fixed · RHSA-2023:1442
Red Hat Enterprise Linux 8.2 Advanced Update Support

firefox-0:102.9.0-4.el8_2

Fixed · RHSA-2023:1445
Red Hat Enterprise Linux 8.2 Advanced Update Support

thunderbird-0:102.9.0-2.el8_2

Fixed · RHSA-2023:1443
Red Hat Enterprise Linux 8.2 Telecommunications Update Service

firefox-0:102.9.0-4.el8_2

Fixed · RHSA-2023:1445
Red Hat Enterprise Linux 8.2 Telecommunications Update Service

thunderbird-0:102.9.0-2.el8_2

Fixed · RHSA-2023:1443
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions

firefox-0:102.9.0-4.el8_2

Fixed · RHSA-2023:1445
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions

thunderbird-0:102.9.0-2.el8_2

Fixed · RHSA-2023:1443
Red Hat Enterprise Linux 8.4 Extended Update Support

firefox-0:102.9.0-4.el8_4

Fixed · RHSA-2023:1444
Red Hat Enterprise Linux 8.4 Extended Update Support

thunderbird-0:102.9.0-2.el8_4

Fixed · RHSA-2023:1472
Red Hat Enterprise Linux 8.6 Extended Update Support

firefox-0:102.9.0-3.el8_6

Fixed · RHSA-2023:1367
Red Hat Enterprise Linux 8.6 Extended Update Support

thunderbird-0:102.9.0-1.el8_6

Fixed · RHSA-2023:1404
Red Hat Enterprise Linux 9

firefox-0:102.9.0-3.el9_1

Fixed · RHSA-2023:1337
Red Hat Enterprise Linux 9

thunderbird-0:102.9.0-1.el9_1

Fixed · RHSA-2023:1407
Red Hat Enterprise Linux 9.0 Extended Update Support

firefox-0:102.9.0-3.el9_0

Fixed · RHSA-2023:1364
Red Hat Enterprise Linux 9.0 Extended Update Support

thunderbird-0:102.9.0-1.el9_0

Fixed · RHSA-2023:1402
Red Hat Enterprise Linux 6

firefox

Out of support scope
Red Hat Enterprise Linux 6

thunderbird

Out of support scope

Product	Package	State	Advisory
Red Hat Enterprise Linux 7	firefox-0:102.9.0-3.el7_9	Fixed	RHSA-2023:1333
Red Hat Enterprise Linux 7	thunderbird-0:102.9.0-1.el7_9	Fixed	RHSA-2023:1401
Red Hat Enterprise Linux 8	firefox-0:102.9.0-3.el8_7	Fixed	RHSA-2023:1336
Red Hat Enterprise Linux 8	thunderbird-0:102.9.0-1.el8_7	Fixed	RHSA-2023:1403
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions	firefox-0:102.9.0-4.el8_1	Fixed	RHSA-2023:1479
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions	thunderbird-0:102.9.0-2.el8_1	Fixed	RHSA-2023:1442
Red Hat Enterprise Linux 8.2 Advanced Update Support	firefox-0:102.9.0-4.el8_2	Fixed	RHSA-2023:1445
Red Hat Enterprise Linux 8.2 Advanced Update Support	thunderbird-0:102.9.0-2.el8_2	Fixed	RHSA-2023:1443
Red Hat Enterprise Linux 8.2 Telecommunications Update Service	firefox-0:102.9.0-4.el8_2	Fixed	RHSA-2023:1445
Red Hat Enterprise Linux 8.2 Telecommunications Update Service	thunderbird-0:102.9.0-2.el8_2	Fixed	RHSA-2023:1443
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	firefox-0:102.9.0-4.el8_2	Fixed	RHSA-2023:1445
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	thunderbird-0:102.9.0-2.el8_2	Fixed	RHSA-2023:1443
Red Hat Enterprise Linux 8.4 Extended Update Support	firefox-0:102.9.0-4.el8_4	Fixed	RHSA-2023:1444
Red Hat Enterprise Linux 8.4 Extended Update Support	thunderbird-0:102.9.0-2.el8_4	Fixed	RHSA-2023:1472
Red Hat Enterprise Linux 8.6 Extended Update Support	firefox-0:102.9.0-3.el8_6	Fixed	RHSA-2023:1367
Red Hat Enterprise Linux 8.6 Extended Update Support	thunderbird-0:102.9.0-1.el8_6	Fixed	RHSA-2023:1404
Red Hat Enterprise Linux 9	firefox-0:102.9.0-3.el9_1	Fixed	RHSA-2023:1337
Red Hat Enterprise Linux 9	thunderbird-0:102.9.0-1.el9_1	Fixed	RHSA-2023:1407
Red Hat Enterprise Linux 9.0 Extended Update Support	firefox-0:102.9.0-3.el9_0	Fixed	RHSA-2023:1364
Red Hat Enterprise Linux 9.0 Extended Update Support	thunderbird-0:102.9.0-1.el9_0	Fixed	RHSA-2023:1402
Red Hat Enterprise Linux 6	firefox	Out of support scope	n/a
Red Hat Enterprise Linux 6	thunderbird	Out of support scope	n/a

Remediation

Red Hat statement

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (11)

https://access.redhat.com/security/cve/CVE-2023-25752
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1811627
Issue TrackingPermissions RequiredVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2178460
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-29659
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-25752
https://www.cve.org/CVERecord?id=CVE-2023-25752
https://www.mozilla.org/en-US/security/advisories/mfsa2023-10/#CVE-2023-25752
https://www.mozilla.org/en-US/security/advisories/mfsa2023-11/#CVE-2023-25752
https://www.mozilla.org/security/advisories/mfsa2023-09/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-10/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-11/
Vendor Advisory

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2023-25752		Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1811627		Issue TrackingPermissions RequiredVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2178460		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-29659		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-25752
https://www.cve.org/CVERecord?id=CVE-2023-25752
https://www.mozilla.org/en-US/security/advisories/mfsa2023-10/#CVE-2023-25752
https://www.mozilla.org/en-US/security/advisories/mfsa2023-11/#CVE-2023-25752
https://www.mozilla.org/security/advisories/mfsa2023-09/		Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-10/		Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-11/		Vendor Advisory