Vulnerability · Published Aug 1, 2023 · Assigned by mozilla
CVE-2023-4055
High 7.5
In plain English
A high-severity buffer overflow in Firefox from Mozilla. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.7%top 45.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie jar state. This could have caused requests to be sent with some cookies missing. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | firefox | 102.14.0-1.el8_8.alma | ALSA-2023:4468 |
| AlmaLinux:9 | firefox | 102.14.0-1.el9_2.alma | ALSA-2023:4462 |
| AlmaLinux:9 | firefox-x11 | 102.14.0-1.el9_2.alma | ALSA-2023:4462 |
| AlmaLinux:8 | thunderbird | 102.14.0-1.el8_8.alma | ALSA-2023:4497 |
| AlmaLinux:9 | thunderbird | 102.14.0-1.el9_2.alma | ALSA-2023:4499 |
| Alpine:v3.20 | firefox-esr | 115.1.0-r0 | ALPINE-CVE-2023-4055 |
| Alpine:v3.21 | firefox-esr | 115.1.0-r0 | ALPINE-CVE-2023-4055 |
| Alpine:v3.22 | firefox-esr | 115.1.0-r0 | ALPINE-CVE-2023-4055 |
| Alpine:v3.23 | firefox-esr | 115.1.0-r0 | ALPINE-CVE-2023-4055 |
| Debian:12 | firefox-esr | 102.14.0esr-1~deb12u1 | DEBIAN-CVE-2023-4055 |
| Debian:12 | firefox-esr | 102.14.0esr-1~deb12u1 | DSA-5464-1 |
| Debian:13 | firefox-esr | 115.1.0esr-1 | DEBIAN-CVE-2023-4055 |
| Debian:14 | firefox-esr | 115.1.0esr-1 | DEBIAN-CVE-2023-4055 |
| Debian:12 | thunderbird | 1:102.14.0-1~deb12u1 | DSA-5469-1 |
| Debian:12 | thunderbird | 1:102.14.0-1~deb12u1 | DEBIAN-CVE-2023-4055 |
| Debian:13 | thunderbird | 1:115.1.0-1 | DEBIAN-CVE-2023-4055 |
| Debian:14 | thunderbird | 1:115.1.0-1 | DEBIAN-CVE-2023-4055 |
| Rocky Linux:8 | firefox | 0:102.14.0-1.el8_8 | RLSA-2023:4468 |
| Rocky Linux:9 | firefox | 0:102.14.0-1.el9_2 | RLSA-2023:4462 |
| Rocky Linux:8 | thunderbird | 0:102.14.0-1.el8_8 | RLSA-2023:4497 |
| Rocky Linux:9 | thunderbird | 0:102.14.0-1.el9_2 | RLSA-2023:4499 |
| Ubuntu:22.04:LTS | mozjs102 | no fix listed | UBUNTU-CVE-2023-4055 |
| Ubuntu:24.04:LTS | mozjs102 | no fix listed | UBUNTU-CVE-2023-4055 |
| Ubuntu:22.04:LTS | mozjs78 | no fix listed | UBUNTU-CVE-2023-4055 |
| Ubuntu:22.04:LTS | mozjs91 | no fix listed | UBUNTU-CVE-2023-4055 |
| Ubuntu:22.04:LTS | thunderbird | 1:102.15.0+build1-0ubuntu0.22.04.1 | UBUNTU-CVE-2023-4055 |
| Ubuntu:22.04:LTS | thunderbird | 1:102.15.0+build1-0ubuntu0.22.04.1 | USN-6333-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | unspecified – before 116 |
| Mozilla | Firefox ESR | unspecified – before 102.14 |
| Mozilla | Firefox ESR | unspecified – before 115.1 |
Weakness: CWE-120
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1782561
- https://www.mozilla.org/security/advisories/mfsa2023-29/
- https://www.mozilla.org/security/advisories/mfsa2023-30/
- https://www.mozilla.org/security/advisories/mfsa2023-31/
- https://www.debian.org/security/2023/dsa-5464
- https://www.debian.org/security/2023/dsa-5469
- https://lists.debian.org/debian-lts-announce/2023/08/msg00008.html
- https://lists.debian.org/debian-lts-announce/2023/08/msg00010.html