遠端 Ubuntu 18.04 LTS/20.04 LTS/21.04 主機上安裝的套件受到 USN-5058-1 公告中所提及的多個弱點影響。

  - 如果 Thunderbird 設定為針對 IMAP 連線使用 STARTTLS，且攻擊者在 STARTTLS 交握完成之前即插入 IMAP 伺服器回應，則 Thunderbird 不會忽略插入的資料。這可能會導致 Thunderbird 顯示不正確的資訊，例如，攻擊者可能會誘騙 Thunderbird 顯示 IMAP 伺服器上不存在的資料夾。此弱點會影響 Thunderbird < 78.12。(CVE-2021-29969)

  - 惡意網頁可能會觸發釋放後使用、記憶體損毀，以及可能遭惡意利用的當機。*僅當已啟用協助工具時才可能觸發此錯誤。* 此弱點會影響 Thunderbird < 78.12、Firefox ESR < 78.12 和 Firefox < 90。(CVE-2021-29970)

  - Mozilla 開發人員報告，Firefox 與 Thunderbird 公用的程式碼中存在記憶體安全性錯誤。
    某些錯誤顯示記憶體會遭到損毀，我們推測若有心人士有意操控，可能惡意利用其中部分錯誤執行任意程式碼。此弱點會影響 Thunderbird < 78.12、Firefox ESR < 78.12 和 Firefox < 90。(CVE-2021-29976)

  - 畫布物件中未初始化的記憶體可造成錯誤的 free()，進而導致記憶體損毀和可能遭惡意利用的當機。此弱點會影響 Thunderbird < 78.13、Thunderbird < 91、Firefox ESR < 78.13 和 Firefox < 91。(CVE-2021-29980)

  - 指令重新排序會產生一系列指令，造成程式在記憶體回收期間錯誤考量物件。此問題可導致記憶體損毀，並造成可能遭利用的當機。
    此弱點會影響 Thunderbird 78.13 更早版本、Thunderbird 91 更早版本、Firefox ESR 78.13 更早版本和 Firefox 91 更早版本。
    (CVE-2021-29984)

  - 媒體通道中存在釋放後使用弱點，可導致記憶體損毀，並造成可能遭利用的當機。此弱點會影響 Thunderbird 78.13 更早版本、Thunderbird 91 更早版本、Firefox ESR 78.13 更早版本和 Firefox 91 更早版本。(CVE-2021-29985)

  - 呼叫 getaddrinfo 時疑似會發生爭用情形，這可導致記憶體損毀，並且可能造成可遭惡意利用的當機。*請注意：此問題僅影響 Linux 作業系統。其他作業系統不受影響。* 此弱點會影響 Thunderbird 78.13 更早版本、Thunderbird 91 更早版本、Firefox ESR 78.13 更早版本和 Firefox 91 更早版本。
    (CVE-2021-29986)

  - Firefox 會將內嵌 list-item 元素錯誤視為區塊元素，導致超出邊界讀取或記憶體損毀，並且可能造成可遭惡意利用的當機。此弱點會影響 Thunderbird 78.13 更早版本、Thunderbird 91 更早版本、Firefox ESR 78.13 更早版本和 Firefox 91 更早版本。(CVE-2021-29988)

  - Mozilla 開發人員報告，Firefox 90 和 Firefox ESR 78.12 中存在記憶體安全性錯誤。某些錯誤顯示記憶體會遭到損毀，我們推測若有心人士有意操控，可能惡意利用其中部分錯誤執行任意程式碼。此弱點會影響 Thunderbird < 78.13、Firefox ESR < 78.13 和 Firefox < 91。(CVE-2021-29989)

  - 在 91.0.4472.101 之前的 Google Chrome 版本中，遠端攻擊者可能會利用 ANGLE 中的超出邊界寫入問題，透過特製的 HTML 頁面執行超出邊界記憶體存取。(CVE-2021-30547)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2389-1 advisory.

  - A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially     exploitable crash. *This bug could only be triggered when accessibility was enabled.*. This vulnerability     affects Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox < 90. (CVE-2021-29970)

  - Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.12,     Firefox ESR < 78.12, and Firefox < 90. (CVE-2021-29976)

  - Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to     potentially perform out of bounds memory access via a crafted HTML page. (CVE-2021-30547)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4939 advisory.

    Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially     result in the execution of arbitrary code. For the stable distribution (buster), these problems have been     fixed in version 78.12.0esr-1~deb10u1. We recommend that you upgrade your firefox-esr packages. For the     detailed security status of firefox-esr please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/firefox-esr

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2740 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 78.12.0 ESR.

    Security Fix(es):

    * Mozilla: Use-after-free in accessibility features of a document (CVE-2021-29970)

    * Mozilla: Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12 (CVE-2021-29976)

    * chromium-browser: Out of bounds write in ANGLE (CVE-2021-30547)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2741 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 78.12.0 ESR.

    Security Fix(es):

    * Mozilla: Use-after-free in accessibility features of a document (CVE-2021-29970)

    * Mozilla: Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12 (CVE-2021-29976)

    * chromium-browser: Out of bounds write in ANGLE (CVE-2021-30547)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2709 advisory.

  - Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to     potentially perform out of bounds memory access via a crafted HTML page. (CVE-2021-30547)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2743 advisory.

    [78.12.0-1.0.1]
    - Removed Upstream references
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

    [78.12.0-1]
    - Update to 78.12.0 build1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2741 advisory.

    [78.12.0-1.0.1]
    - Remove upstream references [Orabug: 30143292]
    - Update distribution for Oracle Linux [Orabug: 30143292]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

    [78.12.0-1]
    - Update to 78.12.0 build1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2458-1 advisory.

  - If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server     responses prior to the completion of the STARTTLS handshake, then Thunderbird didn't ignore the injected     data. This could have resulted in Thunderbird showing incorrect information, for example the attacker     could have tricked Thunderbird to show folders that didn't exist on the IMAP server.  (CVE-2021-29969)

  - A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially     exploitable crash. This bug only affected Firefox when accessibility was enabled.  (CVE-2021-29970)

  - Mozilla developers Emil Ghitta, Tyson Smith, Valentin Gosu, Olli Pettay, and Randell Jesup reported memory     safety bugs present in Firefox 89 and Firefox ESR 78.11. Some of these bugs showed evidence of memory     corruption and we presume that with enough effort some of these could have been exploited to run arbitrary     code.  (CVE-2021-29976)

  - Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to     potentially perform out of bounds memory access via a crafted HTML page. (CVE-2021-30547)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 90.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-28 advisory.

  - A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially     exploitable crash. This bug only affected Firefox when accessibility was enabled. (CVE-2021-29970)

  - If a user had granted a permission to a webpage and saved that grant, any webpage running on the same host
    - irrespective of scheme or port - would be granted that permission.This bug only affects Firefox for     Android. Other operating systems are unaffected. (CVE-2021-29971)

  - An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially     exploitable crash. (CVE-2021-30547)

  - A user-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library.
    Updating the library resolved the issue, and may have remediated other, unknown security vulnerabilities     as well. (CVE-2021-29972)

  - Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This     was corrected to require user interaction with the page before a user's password would be entered by the     browser's autofill functionality.This bug only affects Firefox for Android. Other operating systems     are unaffected. (CVE-2021-29973)

  - When network partitioning was enabled, e.g. as a result of Enhanced Tracking Protection settings, a TLS     error page would allow the user to override an error on a domain which had specified HTTP Strict Transport     Security (which implies that the error should not be override-able.) This issue did not affect the network     connections, and they were correctly upgraded to HTTPS automatically. (CVE-2021-29974)

  - Through a series of DOM manipulations, a message, over which the attacker had control of the text but not     HTML or formatting, could be overlaid on top of another domain (with the new domain correctly shown in the     address bar) resulting in possible user confusion. (CVE-2021-29975)

  - Mozilla developers Emil Ghitta, Tyson Smith, Valentin Gosu, Olli Pettay, and Randell Jesup reported memory     safety bugs present in Firefox 89 and Firefox ESR 78.11. Some of these bugs showed evidence of memory     corruption and we presume that with enough effort some of these could have been exploited to run arbitrary     code. (CVE-2021-29976)

  - Mozilla developers Andrew McCreight, Tyson Smith, Christian Holler, and Gabriele Svelto reported memory     safety bugs present in Firefox 89. Some of these bugs showed evidence of memory corruption and we presume     that with enough effort some of these could have been exploited to run arbitrary code. (CVE-2021-29977)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5011-1 advisory.

    Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service, overlay text     over another domain, or execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has firefox packages installed that are affected by multiple vulnerabilities:

  - A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially     exploitable crash. *This bug could only be triggered when accessibility was enabled.*. This vulnerability     affects Thunderbird < 78.12, Firefox ESR < 78.12, and Firefox < 90. (CVE-2021-29970)

  - Mozilla developers reported memory safety bugs present in code shared between Firefox and Thunderbird.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.12,     Firefox ESR < 78.12, and Firefox < 90. (CVE-2021-29976)

  - Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption     and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91,     Firefox ESR < 78.13, and Firefox < 91. (CVE-2021-29980)

  - Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly     considered during garbage collection. This led to memory corruption and a potentially exploitable crash.
    This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.
    (CVE-2021-29984)

  - A use-after-free vulnerability in media channels could have led to memory corruption and a potentially     exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13,     and Firefox < 91. (CVE-2021-29985)

  - A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable     crash. *Note: This issue only affected Linux operating systems. Other operating systems are unaffected.*     This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.
    (CVE-2021-29986)

  - Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds     read or memory corruption, and a potentially exploitable crash. This vulnerability affects Thunderbird <     78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91. (CVE-2021-29988)

  - Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.13, Firefox ESR < 78.13,     and Firefox < 91. (CVE-2021-29989)

  - Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to     potentially perform out of bounds memory access via a crafted HTML page. (CVE-2021-30547)

  - Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.14, Thunderbird < 78.14,     and Firefox < 92. (CVE-2021-38493)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202208-14 (Mozilla Thunderbird: Multiple Vulnerabilities)

  -  Please review the referenced CVE identifiers for details.  (CVE-2021-29967, CVE-2021-29969,     CVE-2021-29970, CVE-2021-29976, CVE-2021-29980, CVE-2021-29984, CVE-2021-29985, CVE-2021-29986,     CVE-2021-29988, CVE-2021-29989, CVE-2021-30547, CVE-2021-38492, CVE-2021-38493, CVE-2021-38495,     CVE-2021-38503, CVE-2021-38504, CVE-2021-38506, CVE-2021-38507, CVE-2021-38508, CVE-2021-38509,     CVE-2021-40529, CVE-2021-4129, CVE-2021-4140, CVE-2021-43528, CVE-2021-43529, CVE-2021-43536,     CVE-2021-43537, CVE-2021-43538, CVE-2021-43539, CVE-2021-43541, CVE-2021-43542, CVE-2021-43543,     CVE-2021-43545, CVE-2021-43546, CVE-2022-0566, CVE-2022-1196, CVE-2022-1197, CVE-2022-1520, CVE-2022-1529,     CVE-2022-1802, CVE-2022-1834, CVE-2022-2200, CVE-2022-2226, CVE-2022-22737, CVE-2022-22738,     CVE-2022-22739, CVE-2022-22740, CVE-2022-22741, CVE-2022-22742, CVE-2022-22743, CVE-2022-22745,     CVE-2022-22747, CVE-2022-22748, CVE-2022-22751, CVE-2022-22754, CVE-2022-22756, CVE-2022-22759,     CVE-2022-22760, CVE-2022-22761, CVE-2022-22763, CVE-2022-22764, CVE-2022-24713, CVE-2022-26381,     CVE-2022-26383, CVE-2022-26384, CVE-2022-26386, CVE-2022-26387, CVE-2022-26485, CVE-2022-26486,     CVE-2022-28281, CVE-2022-28282, CVE-2022-28285, CVE-2022-28286, CVE-2022-28289, CVE-2022-29909,     CVE-2022-29911, CVE-2022-29912, CVE-2022-29913, CVE-2022-29914, CVE-2022-29916, CVE-2022-29917,     CVE-2022-31736, CVE-2022-31737, CVE-2022-31738, CVE-2022-31740, CVE-2022-31741, CVE-2022-31742,     CVE-2022-31747, CVE-2022-34468, CVE-2022-34470, CVE-2022-34472, CVE-2022-34478, CVE-2022-34479,     CVE-2022-34481, CVE-2022-34484, CVE-2022-36318, CVE-2022-36319)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
152953	Ubuntu 18.04 LTS / 20.04 LTS：thunderbird 弱點 (USN-5058-1)	Nessus	Ubuntu Local Security Checks	2021/9/1	2024/8/27	high
151805	SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2021:2389-1)	Nessus	SuSE Local Security Checks	2021/7/17	2023/7/13	high
151667	Debian DSA-4939-1 : firefox-esr - security update	Nessus	Debian Local Security Checks	2021/7/15	2025/1/24	high
151670	RHEL 8 : firefox (RHSA-2021:2740)	Nessus	Red Hat Local Security Checks	2021/7/15	2024/11/7	high
151671	RHEL 7 : firefox (RHSA-2021:2741)	Nessus	Red Hat Local Security Checks	2021/7/15	2024/11/7	high
151677	Debian DLA-2709-1 : firefox-esr - LTS security update	Nessus	Debian Local Security Checks	2021/7/15	2023/12/8	high
151681	Oracle Linux 8 : firefox (ELSA-2021-2743)	Nessus	Oracle Linux Local Security Checks	2021/7/16	2024/10/22	high
151682	Oracle Linux 7 : firefox (ELSA-2021-2741)	Nessus	Oracle Linux Local Security Checks	2021/7/16	2024/10/22	high
152010	openSUSE 15 Security Update : MozillaThunderbird (openSUSE-SU-2021:2458-1)	Nessus	SuSE Local Security Checks	2021/7/23	2023/12/7	high
151571	Mozilla Firefox < 90.0	Nessus	Windows	2021/7/13	2023/12/8	critical
151800	Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5011-1)	Nessus	Ubuntu Local Security Checks	2021/7/16	2024/8/27	high
160869	NewStart CGSL CORE 5.05 / MAIN 5.05 : firefox Multiple Vulnerabilities (NS-SA-2022-0041)	Nessus	NewStart CGSL Local Security Checks	2022/5/10	2025/3/6	high
163986	GLSA-202208-14 : Mozilla Thunderbird: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2022/8/10	2023/10/16	critical

检测

插件搜索

high

high

high

high

high

high

high

high

high

critical

high

high

critical