Mozilla: Crash in DOMParser due to out-of-memory conditions
Published Aug 1, 2023
7.5
HIGHCVSS 3.1
EPSS 0.93%
Description
An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.
Affected products
-
Affected
- ≥ unspecified, < 116
-
Affected
- ≥ unspecified, < 102.14
- ≥ unspecified, < 115.1
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Mozilla | Firefox | unknown | Affected
|
| Mozilla | Firefox ESR | unknown | Affected
|
Configuration 1
Configuration 2
- 10.0
- 11.0
- 12.0
-
Affected
- ≥ 0, < 116
-
Affected
- ≥ 0, < 102.14
- ≥ 0, < 115.1
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Mozilla | Firefox | unknown | Affected
|
| Mozilla | Firefox Esr | unknown | Affected
|
Red Hat Enterprise Linux 7
firefox-0:102.14.0-1.el7_9
Fixed · RHSA-2023:4461
Red Hat Enterprise Linux 7
thunderbird-0:102.14.0-1.el7_9
Fixed · RHSA-2023:4495
Red Hat Enterprise Linux 8
firefox-0:102.14.0-1.el8_8
Fixed · RHSA-2023:4468
Red Hat Enterprise Linux 8
thunderbird-0:102.14.0-1.el8_8
Fixed · RHSA-2023:4497
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions
firefox-0:102.14.0-1.el8_1
Fixed · RHSA-2023:4464
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions
thunderbird-0:102.14.0-1.el8_1
Fixed · RHSA-2023:4492
Red Hat Enterprise Linux 8.2 Advanced Update Support
firefox-0:102.14.0-1.el8_2
Fixed · RHSA-2023:4460
Red Hat Enterprise Linux 8.2 Advanced Update Support
thunderbird-0:102.14.0-1.el8_2
Fixed · RHSA-2023:4496
Red Hat Enterprise Linux 8.2 Telecommunications Update Service
firefox-0:102.14.0-1.el8_2
Fixed · RHSA-2023:4460
Red Hat Enterprise Linux 8.2 Telecommunications Update Service
thunderbird-0:102.14.0-1.el8_2
Fixed · RHSA-2023:4496
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
firefox-0:102.14.0-1.el8_2
Fixed · RHSA-2023:4460
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
thunderbird-0:102.14.0-1.el8_2
Fixed · RHSA-2023:4496
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
firefox-0:102.14.0-1.el8_4
Fixed · RHSA-2023:4469
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
thunderbird-0:102.14.0-1.el8_4
Fixed · RHSA-2023:4500
Red Hat Enterprise Linux 8.4 Telecommunications Update Service
firefox-0:102.14.0-1.el8_4
Fixed · RHSA-2023:4469
Red Hat Enterprise Linux 8.4 Telecommunications Update Service
thunderbird-0:102.14.0-1.el8_4
Fixed · RHSA-2023:4500
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
firefox-0:102.14.0-1.el8_4
Fixed · RHSA-2023:4469
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
thunderbird-0:102.14.0-1.el8_4
Fixed · RHSA-2023:4500
Red Hat Enterprise Linux 8.6 Extended Update Support
firefox-0:102.14.0-1.el8_6
Fixed · RHSA-2023:4463
Red Hat Enterprise Linux 8.6 Extended Update Support
thunderbird-0:102.14.0-1.el8_6
Fixed · RHSA-2023:4493
Red Hat Enterprise Linux 9
firefox-0:102.14.0-1.el9_2
Fixed · RHSA-2023:4462
Red Hat Enterprise Linux 9
thunderbird-0:102.14.0-1.el9_2
Fixed · RHSA-2023:4499
Red Hat Enterprise Linux 9.0 Extended Update Support
firefox-0:102.14.0-1.el9_0
Fixed · RHSA-2023:4465
Red Hat Enterprise Linux 9.0 Extended Update Support
thunderbird-0:102.14.0-1.el9_0
Fixed · RHSA-2023:4494
Red Hat Enterprise Linux 6
firefox
Out of support scope
Red Hat Enterprise Linux 6
thunderbird
Out of support scope
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 7 | firefox-0:102.14.0-1.el7_9 | Fixed | RHSA-2023:4461 |
| Red Hat Enterprise Linux 7 | thunderbird-0:102.14.0-1.el7_9 | Fixed | RHSA-2023:4495 |
| Red Hat Enterprise Linux 8 | firefox-0:102.14.0-1.el8_8 | Fixed | RHSA-2023:4468 |
| Red Hat Enterprise Linux 8 | thunderbird-0:102.14.0-1.el8_8 | Fixed | RHSA-2023:4497 |
| Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions | firefox-0:102.14.0-1.el8_1 | Fixed | RHSA-2023:4464 |
| Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions | thunderbird-0:102.14.0-1.el8_1 | Fixed | RHSA-2023:4492 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | firefox-0:102.14.0-1.el8_2 | Fixed | RHSA-2023:4460 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | thunderbird-0:102.14.0-1.el8_2 | Fixed | RHSA-2023:4496 |
| Red Hat Enterprise Linux 8.2 Telecommunications Update Service | firefox-0:102.14.0-1.el8_2 | Fixed | RHSA-2023:4460 |
| Red Hat Enterprise Linux 8.2 Telecommunications Update Service | thunderbird-0:102.14.0-1.el8_2 | Fixed | RHSA-2023:4496 |
| Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | firefox-0:102.14.0-1.el8_2 | Fixed | RHSA-2023:4460 |
| Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | thunderbird-0:102.14.0-1.el8_2 | Fixed | RHSA-2023:4496 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | firefox-0:102.14.0-1.el8_4 | Fixed | RHSA-2023:4469 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | thunderbird-0:102.14.0-1.el8_4 | Fixed | RHSA-2023:4500 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | firefox-0:102.14.0-1.el8_4 | Fixed | RHSA-2023:4469 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | thunderbird-0:102.14.0-1.el8_4 | Fixed | RHSA-2023:4500 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | firefox-0:102.14.0-1.el8_4 | Fixed | RHSA-2023:4469 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | thunderbird-0:102.14.0-1.el8_4 | Fixed | RHSA-2023:4500 |
| Red Hat Enterprise Linux 8.6 Extended Update Support | firefox-0:102.14.0-1.el8_6 | Fixed | RHSA-2023:4463 |
| Red Hat Enterprise Linux 8.6 Extended Update Support | thunderbird-0:102.14.0-1.el8_6 | Fixed | RHSA-2023:4493 |
| Red Hat Enterprise Linux 9 | firefox-0:102.14.0-1.el9_2 | Fixed | RHSA-2023:4462 |
| Red Hat Enterprise Linux 9 | thunderbird-0:102.14.0-1.el9_2 | Fixed | RHSA-2023:4499 |
| Red Hat Enterprise Linux 9.0 Extended Update Support | firefox-0:102.14.0-1.el9_0 | Fixed | RHSA-2023:4465 |
| Red Hat Enterprise Linux 9.0 Extended Update Support | thunderbird-0:102.14.0-1.el9_0 | Fixed | RHSA-2023:4494 |
| Red Hat Enterprise Linux 6 | firefox | Out of support scope | n/a |
| Red Hat Enterprise Linux 6 | thunderbird | Out of support scope | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
References (17)
- https://access.redhat.com/security/cve/CVE-2023-4048 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1841368 Issue TrackingPermissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=2228363 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-53939 Advisory
- https://lists.debian.org/debian-lts-announce/2023/08/msg00008.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/08/msg00010.html Third Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-4048
- https://www.cve.org/CVERecord?id=CVE-2023-4048
- https://www.debian.org/security/2023/dsa-5464 Third Party Advisory
- https://www.debian.org/security/2023/dsa-5469 Third Party Advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-30/#CVE-2023-4048
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-31/#CVE-2023-4048
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-32/#CVE-2023-4048
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-33/#CVE-2023-4048
- https://www.mozilla.org/security/advisories/mfsa2023-29/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2023-30/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2023-31/ Vendor Advisory
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
GitHub
No data