PT-2024-32767 · Mozilla+4 · Firefox+4

Hanno Böck · Published 2024-05-14 · Updated 2025-03-14 · CVE-2024-4772

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 126

Description A predictable HTTP digest authentication nonce value was generated using the rand() function.

Recommendations For Firefox versions prior to 126, update to version 126 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-338

Related Identifiers

ALT-PU-2024-10126

ALT-PU-2024-10593

ALT-PU-2024-15839

ALT-PU-2024-7772

CVE-2024-4772

OESA-2025-1265

OESA-2025-1268

OPENSUSE-SU-2024:13980-1

OPENSUSE-SU-2024:14572-1

USN-6779-1

USN-6779-2

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

References · 2087

• 🔥 https://github.com/LOURC0D3/CVE-2024-4367-PoC · Exploit
• 🔥 https://github.com/bjrjk/CVE-2024-29943 · Exploit
• 🔥 https://github.com/s4vvysec/CVE-2024-4367-POC · Exploit
• 🔥 https://github.com/spaceraccoon/detect-cve-2024-4367 · Exploit
• 🔥 https://github.com/Zombie-Kaiser/cve-2024-4367-PoC-fixed · Exploit
• 🔥 https://github.com/tdonaworth/Firefox-CVE-2024-9680 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-4367 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-9394 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-6613 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-10466 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-5725 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-9400 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-5172 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-3853 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-1548 · Security Note