Vulnerability CVE-2024-0743: Information

Description

An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.9, and Thunderbird < 115.9.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2024-0743
Published: Jan. 23, 2024
Modified: March 25, 2024
Error type identifier: CWE-252

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus122.0-alt1126.0-alt1ALT-PU-2024-1368-1338897Fixed
firefoxsisyphus_riscv64122.0.1-alt0.port125.0.3-alt0.portALT-PU-2024-2222-1-Fixed
firefoxsisyphus_loongarch64123.0-alt1.0.port126.0-alt1.0.portALT-PU-2024-3000-1-Fixed
firefox-esrsisyphus115.9.1-alt1115.10.0-alt1ALT-PU-2024-4963-2344244Fixed
firefox-esrsisyphus_loongarch64115.9.1-alt1115.10.0-alt1ALT-PU-2024-5937-1-Fixed
firefox-esrp10115.9.1-alt1115.10.0-alt1ALT-PU-2024-4971-3344254Fixed
firefox-esrc10f1115.9.1-alt0.c10.1115.9.1-alt0.c10.1ALT-PU-2024-6027-2344289Fixed
palemoonsisyphus33.0.0-alt133.1.0-alt1ALT-PU-2024-1580-3339426Fixed
palemoonp1033.0.1-alt133.1.0-alt1ALT-PU-2024-4278-5343208Fixed
thunderbirdsisyphus115.9.0-alt1115.9.0-alt1ALT-PU-2024-4973-2344245Fixed
thunderbirdsisyphus_loongarch64115.9.0-alt1115.9.0-alt1ALT-PU-2024-5939-1-Fixed
thunderbirdp10115.9.0-alt1115.9.0-alt1ALT-PU-2024-5117-3344280Fixed
thunderbirdc10f1115.9.0-alt0.c10.1115.9.0-alt0.c10.1ALT-PU-2024-6213-2344693Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1867408
  • Permissions Required
https://www.mozilla.org/security/advisories/mfsa2024-01/
  • Release Notes
  • Vendor Advisory
https://lists.debian.org/debian-lts-announce/2024/03/msg00010.html
    https://www.mozilla.org/security/advisories/mfsa2024-13/
      https://www.mozilla.org/security/advisories/mfsa2024-14/
        https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html
          https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html

              1. Configuration 1

                cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
                End excliding
                122.0
            VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
            Version: v24.5.1
            Back to top