CVE-2023-25736

Related Files

Ubuntu Security Notice USN-5880-1

Posted Feb 20, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 5880-1 - Christian Holler discovered that Firefox did not properly manage memory when using PKCS 12 Safe Bag attributes. An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes. Johan Carlsson discovered that Firefox did not properly manage child iframe's unredacted URI when using Content-Security-Policy-Report-Only header. An attacker could potentially exploits this to obtain sensitive information.

tags | advisory, arbitrary

systems | linux, ubuntu

advisories | CVE-2023-0767, CVE-2023-25728, CVE-2023-25729, CVE-2023-25730, CVE-2023-25731, CVE-2023-25732, CVE-2023-25733, CVE-2023-25735, CVE-2023-25736, CVE-2023-25739, CVE-2023-25742, CVE-2023-25744

SHA-256 | 52a03d98745dab7fc6ca08096031142868f3b4b4ad08bdeed6e8c320a08a74d8

Download | Favorite | View