Vulnerability CVE-2022-31747: Information

Description

Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2022-31747
Published: Dec. 22, 2022
Modified: Aug. 8, 2023
Error type identifier: CWE-125, CWE-787, CWE-416

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus101.0-alt1127.0-alt1ALT-PU-2022-1988-1301047Fixed
firefoxp10105.0.1-alt0.p10.1118.0.2-alt0.p10.1ALT-PU-2022-2930-1307737Fixed
firefoxp9105.0.1-alt0.c9.1105.0.1-alt0.c9.1ALT-PU-2023-4339-1319683Fixed
firefoxc10f1105.0.1-alt0.p10.1112.0.2-alt0.p10.1ALT-PU-2022-2930-1307737Fixed
firefoxc9f2105.0.1-alt0.c9.1105.0.1-alt0.c9.1ALT-PU-2023-1139-1309126Fixed
firefoxp11101.0-alt1126.0.1-alt1ALT-PU-2022-1988-1301047Fixed
firefox-esrsisyphus91.10.0-alt1115.11.0-alt1ALT-PU-2022-1995-1301215Fixed
firefox-esrp1091.10.0-alt0.p10.1115.11.0-alt1ALT-PU-2022-2000-1301334Fixed
firefox-esrp991.10.0-alt0.p9.1102.11.0-alt0.c9.1ALT-PU-2022-2044-1301652Fixed
firefox-esrc10f191.10.0-alt0.p10.1115.9.1-alt0.c10.1ALT-PU-2022-2000-1301334Fixed
firefox-esrc9f291.10.0-alt0.c9.1102.12.0-alt0.c9.1ALT-PU-2022-2017-1301458Fixed
firefox-esrp1191.10.0-alt1115.11.0-alt1ALT-PU-2022-1995-1301215Fixed
thunderbirdsisyphus91.10.0-alt1115.9.0-alt1ALT-PU-2022-1996-1301216Fixed
thunderbirdp1091.10.0-alt0.p10.1115.9.0-alt1ALT-PU-2022-2006-1301335Fixed
thunderbirdp991.10.0-alt0.p9.1102.11.0-alt0.c9.1ALT-PU-2022-2053-1301653Fixed
thunderbirdc10f191.10.0-alt0.p10.1115.9.0-alt0.c10.1ALT-PU-2022-2006-1301335Fixed
thunderbirdc9f291.10.0-alt0.c9.1102.11.0-alt0.c9.1ALT-PU-2022-2031-1301459Fixed
thunderbirdp1191.10.0-alt1115.9.0-alt1ALT-PU-2022-1996-1301216Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://www.mozilla.org/security/advisories/mfsa2022-20/
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2022-22/
  • Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2022-21/
  • Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1760765%2C1765610%2C1766283%2C1767365%2C1768559%2C1768734
  • Issue Tracking
  • Vendor Advisory

    1. Configuration 1

      cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
      End excliding
      101
      cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
      End excliding
      91.10
      cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
      End excliding
      91.10
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top