Log in Start free

Vulnerability · Published Sep 11, 2023 · Assigned by mozilla

CVE-2023-4578Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception

Medium 6.5

In plain English

A medium-severity security flaw in Firefox from Mozilla. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)0.6%top 50.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the function could attempt to allocate memory when none is available which would have caused a newly created Out of Memory exception to be mishandled as a Syntax Error. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8firefox102.15.0-1.el8_8.almaALSA-2023:4952
AlmaLinux:9firefox102.15.0-1.el9_2.almaALSA-2023:4958
AlmaLinux:9firefox-x11102.15.0-1.el9_2.almaALSA-2023:4958
AlmaLinux:8thunderbird102.15.0-1.el8_8.almaALSA-2023:4954
AlmaLinux:9thunderbird102.15.0-1.el9_2.almaALSA-2023:4955
Alpine:v3.20firefox-esr115.2.0-r0ALPINE-CVE-2023-4578
Alpine:v3.21firefox-esr115.2.0-r0ALPINE-CVE-2023-4578
Alpine:v3.22firefox-esr115.2.0-r0ALPINE-CVE-2023-4578
Alpine:v3.23firefox-esr115.2.0-r0ALPINE-CVE-2023-4578
Debian:13firefox-esr115.2.0esr-1DEBIAN-CVE-2023-4578
Debian:14firefox-esr115.2.0esr-1DEBIAN-CVE-2023-4578
Debian:13thunderbird1:115.2.0-1DEBIAN-CVE-2023-4578
Debian:14thunderbird1:115.2.0-1DEBIAN-CVE-2023-4578
Rocky Linux:8firefox0:102.15.0-1.el8_8RLSA-2023:4952
Rocky Linux:8thunderbird0:102.15.0-1.el8_8RLSA-2023:4954
Ubuntu:22.04:LTSmozjs102no fix listedUBUNTU-CVE-2023-4578
Ubuntu:24.04:LTSmozjs102no fix listedUBUNTU-CVE-2023-4578
Ubuntu:22.04:LTSmozjs78no fix listedUBUNTU-CVE-2023-4578
Ubuntu:22.04:LTSmozjs91no fix listedUBUNTU-CVE-2023-4578
Ubuntu:22.04:LTSthunderbird1:115.3.1+build1-0ubuntu0.22.04.2UBUNTU-CVE-2023-4578
Ubuntu:22.04:LTSthunderbird1:115.3.1+build1-0ubuntu0.22.04.2USN-6405-1

Affected products (as reported)

VendorProductVersions
Mozilla Firefox unspecified – before 117
Mozilla Firefox ESR unspecified – before 115.2
Mozilla Thunderbird unspecified – before 115.2

References