PT-2022-6191 · Mozilla+10 · Firefox+10
Bwc
·
Published
2022-12-13
·
Updated
2024-12-12
·
CVE-2022-46871
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 108
Description
The issue is related to an out-of-date library, libusrsctp, which contains vulnerabilities that could be exploited. This library is used by the Mozilla Firefox browser and is associated with a buffer overflow in memory. Exploitation of this issue may allow a remote attacker to use the vulnerable library and launch an attack on a device.
Recommendations
For Firefox versions prior to 108, update to version 108 or later to resolve the issue. As a temporary workaround, consider restricting the use of the libusrsctp library until a patch is available.
Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Firefox
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu