Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-3600

Fixed in a distro release EPSS <1%

During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and Thunderbird < 115.0.1.

Published 2023-07-12 · CVE record · OSV

Products: Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird

Distro releases

ReleasePackageFixed in
AlmaLinux 9firefox115.3.1-1.el9_2.alma.1
AlmaLinux 9firefox-x11115.3.1-1.el9_2.alma.1
AlmaLinux 9thunderbird115.3.1-1.el9_2.alma
Red Hat Enterprise Linux 7firefox0:115.3.1-1.el7_9
Red Hat Enterprise Linux 7firefox-debuginfo0:115.3.1-1.el7_9
Red Hat Enterprise Linux 7thunderbird0:115.3.1-1.el7_9
Red Hat Enterprise Linux 7thunderbird-debuginfo0:115.3.1-1.el7_9
Red Hat Enterprise Linux 8firefox0:115.3.1-1.el8_8
Red Hat Enterprise Linux 8firefox-debuginfo0:115.3.1-1.el8_8
Red Hat Enterprise Linux 8firefox-debugsource0:115.3.1-1.el8_8
Red Hat Enterprise Linux 8thunderbird0:115.3.1-1.el8_8
Red Hat Enterprise Linux 8thunderbird-debuginfo0:115.3.1-1.el8_8
Red Hat Enterprise Linux 8thunderbird-debugsource0:115.3.1-1.el8_8
Red Hat Enterprise Linux 9firefox0:115.3.1-1.el9_2
Red Hat Enterprise Linux 9firefox-debuginfo0:115.3.1-1.el9_2
Red Hat Enterprise Linux 9firefox-debugsource0:115.3.1-1.el9_2
Red Hat Enterprise Linux 9firefox-x110:115.3.1-1.el9_2
Red Hat Enterprise Linux 9thunderbird0:115.3.1-1.el9_2
Red Hat Enterprise Linux 9thunderbird-debuginfo0:115.3.1-1.el9_2
Red Hat Enterprise Linux 9thunderbird-debugsource0:115.3.1-1.el9_2
Red Hat rhel aus 8.2firefox0:115.3.1-1.el8_2
Red Hat rhel aus 8.2firefox-debuginfo0:115.3.1-1.el8_2
Red Hat rhel aus 8.2firefox-debugsource0:115.3.1-1.el8_2
Red Hat rhel aus 8.2thunderbird0:115.3.1-1.el8_2
Red Hat rhel aus 8.2thunderbird-debuginfo0:115.3.1-1.el8_2
Red Hat rhel aus 8.2thunderbird-debugsource0:115.3.1-1.el8_2
Red Hat rhel aus 8.4firefox0:115.3.1-1.el8_4
Red Hat rhel aus 8.4firefox-debuginfo0:115.3.1-1.el8_4
Red Hat rhel aus 8.4firefox-debugsource0:115.3.1-1.el8_4
Red Hat rhel aus 8.4thunderbird0:115.3.1-1.el8_4
Red Hat rhel aus 8.4thunderbird-debuginfo0:115.3.1-1.el8_4
Red Hat rhel aus 8.4thunderbird-debugsource0:115.3.1-1.el8_4
Red Hat rhel e4s 8.1firefox0:115.3.1-1.el8_1
Red Hat rhel e4s 8.1firefox-debuginfo0:115.3.1-1.el8_1
Red Hat rhel e4s 8.1firefox-debugsource0:115.3.1-1.el8_1
Red Hat rhel e4s 8.1thunderbird0:115.3.1-1.el8_1
Red Hat rhel e4s 8.1thunderbird-debuginfo0:115.3.1-1.el8_1
Red Hat rhel e4s 8.1thunderbird-debugsource0:115.3.1-1.el8_1
Red Hat rhel e4s 8.2firefox0:115.3.1-1.el8_2
Red Hat rhel e4s 8.2firefox-debuginfo0:115.3.1-1.el8_2
Red Hat rhel e4s 8.2firefox-debugsource0:115.3.1-1.el8_2
Red Hat rhel e4s 8.2thunderbird0:115.3.1-1.el8_2
Red Hat rhel e4s 8.2thunderbird-debuginfo0:115.3.1-1.el8_2
Red Hat rhel e4s 8.2thunderbird-debugsource0:115.3.1-1.el8_2
Red Hat rhel e4s 8.4firefox0:115.3.1-1.el8_4
Red Hat rhel e4s 8.4firefox-debuginfo0:115.3.1-1.el8_4
Red Hat rhel e4s 8.4firefox-debugsource0:115.3.1-1.el8_4
Red Hat rhel e4s 8.4thunderbird0:115.3.1-1.el8_4
Red Hat rhel e4s 8.4thunderbird-debuginfo0:115.3.1-1.el8_4
Red Hat rhel e4s 8.4thunderbird-debugsource0:115.3.1-1.el8_4
Red Hat rhel eus 8.6firefox0:115.3.1-1.el8_6
Red Hat rhel eus 8.6firefox-debuginfo0:115.3.1-1.el8_6
Red Hat rhel eus 8.6firefox-debugsource0:115.3.1-1.el8_6
Red Hat rhel eus 8.6thunderbird0:115.3.1-1.el8_6
Red Hat rhel eus 8.6thunderbird-debuginfo0:115.3.1-1.el8_6
Red Hat rhel eus 8.6thunderbird-debugsource0:115.3.1-1.el8_6
Red Hat rhel eus 9.0firefox0:115.3.1-1.el9_0
Red Hat rhel eus 9.0firefox-debuginfo0:115.3.1-1.el9_0
Red Hat rhel eus 9.0firefox-debugsource0:115.3.1-1.el9_0
Red Hat rhel eus 9.0thunderbird0:115.3.1-1.el9_0
Red Hat rhel eus 9.0thunderbird-debuginfo0:115.3.1-1.el9_0
Red Hat rhel eus 9.0thunderbird-debugsource0:115.3.1-1.el9_0
Red Hat rhel tus 8.2firefox0:115.3.1-1.el8_2
Red Hat rhel tus 8.2firefox-debuginfo0:115.3.1-1.el8_2
Red Hat rhel tus 8.2firefox-debugsource0:115.3.1-1.el8_2
Red Hat rhel tus 8.2thunderbird0:115.3.1-1.el8_2
Red Hat rhel tus 8.2thunderbird-debuginfo0:115.3.1-1.el8_2
Red Hat rhel tus 8.2thunderbird-debugsource0:115.3.1-1.el8_2
Red Hat rhel tus 8.4firefox0:115.3.1-1.el8_4
Red Hat rhel tus 8.4firefox-debuginfo0:115.3.1-1.el8_4
Red Hat rhel tus 8.4firefox-debugsource0:115.3.1-1.el8_4
Red Hat rhel tus 8.4thunderbird0:115.3.1-1.el8_4
Red Hat rhel tus 8.4thunderbird-debuginfo0:115.3.1-1.el8_4
Red Hat rhel tus 8.4thunderbird-debugsource0:115.3.1-1.el8_4
Rocky Linux 8thunderbird0:115.3.1-1.el8_8
Rocky Linux 9thunderbird0:115.3.1-1.el9_2
SUSE Enterprise Storage 7MozillaFirefox115.0.2-150200.152.96.1
SUSE Enterprise Storage 7.1MozillaFirefox115.0.2-150200.152.96.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSMozillaFirefox115.0.2-150000.150.94.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSMozillaFirefox115.0.2-150200.152.96.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSMozillaFirefox115.0.2-150200.152.96.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSMozillaFirefox115.0.2-150200.152.96.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP4MozillaFirefox115.0.2-150200.152.96.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP5MozillaFirefox115.0.2-150200.152.96.1
SUSE Linux Enterprise Module for Package Hub 15 SP4MozillaThunderbird115.0.1-150200.8.124.1
SUSE Linux Enterprise Module for Package Hub 15 SP5MozillaThunderbird115.0.1-150200.8.124.1
SUSE Linux Enterprise Real Time 15 SP3MozillaFirefox115.0.2-150200.152.96.1
SUSE Linux Enterprise Server 12 SP2-BCLMozillaFirefox115.0.2-112.170.2
SUSE Linux Enterprise Server 12 SP4-ESPOSMozillaFirefox115.0.2-112.170.2
SUSE Linux Enterprise Server 12 SP4-LTSSMozillaFirefox115.0.2-112.170.2
SUSE Linux Enterprise Server 12 SP5MozillaFirefox115.0.2-112.170.2
SUSE Linux Enterprise Server 15 SP1-LTSSMozillaFirefox115.0.2-150000.150.94.1
SUSE Linux Enterprise Server 15 SP2-LTSSMozillaFirefox115.0.2-150200.152.96.1
SUSE Linux Enterprise Server 15 SP3-LTSSMozillaFirefox115.0.2-150200.152.96.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4MozillaFirefox115.0.2-112.170.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5MozillaFirefox115.0.2-112.170.2
SUSE Linux Enterprise Server for SAP Applications 15 SP1MozillaFirefox115.0.2-150000.150.94.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2MozillaFirefox115.0.2-150200.152.96.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3MozillaFirefox115.0.2-150200.152.96.1
SUSE Linux Enterprise Software Development Kit 12 SP5MozillaFirefox115.0.2-112.170.2
SUSE Linux Enterprise Workstation Extension 15 SP4MozillaThunderbird115.0.1-150200.8.124.1
SUSE Linux Enterprise Workstation Extension 15 SP5MozillaThunderbird115.0.1-150200.8.124.1
SUSE OpenStack Cloud 9MozillaFirefox115.0.2-112.170.2
SUSE OpenStack Cloud Crowbar 9MozillaFirefox115.0.2-112.170.2
Ubuntu 20.04 LTSfirefox115.0.2+build1-0ubuntu0.20.04.1
Ubuntu 20.04 LTSthunderbird1:115.3.1+build1-0ubuntu0.20.04.1
Ubuntu 22.04 LTSthunderbird1:115.3.1+build1-0ubuntu0.22.04.2
openSUSE Leap 15.4MozillaFirefox115.0.2-150200.152.96.1
openSUSE Leap 15.4MozillaThunderbird115.0.1-150200.8.124.1
openSUSE Leap 15.5MozillaFirefox115.0.2-150200.152.96.1
openSUSE Leap 15.5MozillaThunderbird115.0.1-150200.8.124.1
openSUSE TumbleweedMozillaFirefox115.0.2-1.1
openSUSE Tumbleweedfirefox-esr128.5.1-1.1