CVE-2024-5702
Publication date 17 June 2024
Last updated 24 July 2024
Ubuntu priority
Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, and Thunderbird < 115.12.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| firefox | 24.04 LTS noble |
Not affected
|
| 22.04 LTS jammy |
Not affected
|
|
| 20.04 LTS focal |
Fixed 125.0.2+build1-0ubuntu0.20.04.2
|
|
| thunderbird | 24.04 LTS noble |
Not affected
|
| 22.04 LTS jammy |
Fixed 1:115.12.0+build3-0ubuntu0.22.04.1
|
|
| 20.04 LTS focal |
Fixed 1:115.12.0+build3-0ubuntu0.20.04.1
|
Notes
References
Related Ubuntu Security Notices (USN)
- USN-6840-1
- Thunderbird vulnerabilities
- 19 June 2024
Other references
- https://www.cve.org/CVERecord?id=CVE-2024-5702
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-26/#CVE-2024-5702
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-28/#CVE-2024-5702
- https://bugzilla.mozilla.org/show_bug.cgi?id=1193389
- https://www.mozilla.org/security/advisories/mfsa2024-18/
- https://www.mozilla.org/security/advisories/mfsa2024-26/
- https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html
- https://www.mozilla.org/security/advisories/mfsa2024-28/