Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 511
Alerts This Week
Warning Icon 1 511

Ubuntu 20.04 LTS USN-6992-1 Critical: Firefox Multiple Issues

ubuntu
Calendar Grey September 5, 2024
Scroller Ubuntu
Ubuntu Security Notice USN-6993-1 addresses vulnerabilities in Chrome that could lead to data exposure, service disruptions, or arbitrary code execution.
Several security issues were fixed in Firefox.

Summary

Several security issues were fixed in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

Multiple security issues were discovered in Firefox. If a user were

tricked into opening a specially crafted website, an attacker could

potentially exploit these to cause a denial of service, obtain sensitive

information across domains, or execute arbitrary code. (CVE-2024-8382,

CVE-2024-8383, CVE-2024-8386, CVE-2024-8387, CVE-2024-8389)

Nils Bars discovered that Firefox contained a type confusion vulnerability

when performing certain property name lookups. An attacker could

potentially exploit this issue to cause a denial of service, or execute

arbitrary code. (CVE-2024-8381)

It was discovered that Firefox did not properly manage memory during

garbage collection. An attacker could potentially exploit this issue to

cause a denial of service, or execute arbitrary code. (CVE-2024-8384)

Seunghyun Lee discovered that Firefox contained a t...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service arbitrary code execution firefox information disclosure ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
   firefox                         130.0+build2-0ubuntu0.20.04.1

After a standard system update you need to restart Firefox to make all the
necessary changes

References

https://ubuntu.com/security/notices/USN-6992-1

CVE-2024-8381, CVE-2024-8382, CVE-2024-8383, CVE-2024-8384,

CVE-2024-8385, CVE-2024-8386, CVE-2024-8387, CVE-2024-8389

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6992-1

Topics%20covered

Topics Covered

security advisory denial of service arbitrary code execution firefox information disclosure ubuntu

Package Information

https://launchpad.net/ubuntu/+source/firefox/130.0+build2-0ubuntu0.20.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.