PT-2023-5272 · Mozilla+4 · Focus For Android+6

Lukas Bernhard · Published 2023-02-24 · Updated 2025-01-10 · CVE-2023-29544

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 112 Firefox for Android versions prior to 112 Focus for Android versions prior to 112

Description The issue is related to uncontrolled resource exhaustion. If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This could allow a remote attacker to cause a denial of service.

Recommendations For Firefox versions prior to 112, update to version 112 or later. For Firefox for Android versions prior to 112, update to version 112 or later. For Focus for Android versions prior to 112, update to version 112 or later.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALT-PU-2023-1621

ALT-PU-2023-1817

ALT-PU-2023-5202

ALT-PU-2023-5754

ALT-PU-2023-6436

ALT-PU-2024-3614

BDU:2023-05893

CVE-2023-29544

OPENSUSE-SU-2024:12882-1

OPENSUSE-SU-2024:14572-1

USN-6010-1

USN-6010-2

USN-6010-3

Affected Products

Alt Linux

Astra Linux

Firefox

Firefox For Android

Focus For Android

Linuxmint

Ubuntu

References · 1899

• https://ubuntu.com/security/CVE-2023-29538 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29551 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12882-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29550 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29548 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-29544 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29543 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2023-13/#CVE-2023-29544 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29544 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29539 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6010-2 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-29544 · Security Note
• https://ubuntu.com/security/CVE-2023-29540 · Vendor Advisory