Ubuntu 20.04 LTS: USN-6747-1 Critical Denial of Service Threats

Several security issues were fixed in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

Multiple security issues were discovered in Firefox. If a user were

tricked into opening a specially crafted website, an attacker could

potentially exploit these to cause a denial of service, obtain sensitive

information across domains, or execute arbitrary code. (CVE-2024-3852,

CVE-2024-3864, CVE-2024-3865)

Bartek Nowotarski discovered that Firefox did not properly limit HTTP/2

CONTINUATION frames. An attacker could potentially exploit this issue to

cause a denial of service. (CVE-2024-3302)

Gary Kwong discovered that Firefox did not properly manage memory when

running garbage collection during realm initialization. An attacker could

potentially exploit this issue to cause a denial of service, or execute

arbitrary code. (CVE-2024-3853)

Lukas Bernhard discovered that Firefox did not properly manage memory

during JIT optimisations, le...