An update of the mozjs package has been released.

According to the versions of the mozjs60 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop.
    This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw.
    This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2.
    (CVE-2019-11707)

  - A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if     Spectre mitigations have been disabled. This vulnerability could allow an attacker to create an arbitrary     value in compiled JavaScript, for which the range analysis will infer a fully controlled, incorrect range     in circumstances where users have explicitly disabled Spectre mitigations. *Note: Spectre mitigations are     currently enabled for all users by default settings.*. This vulnerability affects Thunderbird < 60.6,     Firefox ESR < 60.6, and Firefox < 66. (CVE-2019-9793)

  - Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,     resulting in memory corruption and a potentially exploitable crash. *Note: this issue only affects Firefox     on ARM64 platforms.* This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird <     68.10.0. (CVE-2020-12417)

  - Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1,     and Firefox ESR 91.12. Some of these bugs showed evidence of memory corruption and we presume that with     enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects     Thunderbird < 102.2, Thunderbird < 91.13, Firefox ESR < 91.13, Firefox ESR < 102.2, and Firefox < 104.
    (CVE-2022-38478)

  - Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to     be stored in the main compartment resulting in a use-after-free after unwrapping the proxy. This     vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. (CVE-2023-25735)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the mozjs60 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop.
    This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw.
    This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2.
    (CVE-2019-11707)

  - A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if     Spectre mitigations have been disabled. This vulnerability could allow an attacker to create an arbitrary     value in compiled JavaScript, for which the range analysis will infer a fully controlled, incorrect range     in circumstances where users have explicitly disabled Spectre mitigations. *Note: Spectre mitigations are     currently enabled for all users by default settings.*. This vulnerability affects Thunderbird < 60.6,     Firefox ESR < 60.6, and Firefox < 66. (CVE-2019-9793)

  - Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,     resulting in memory corruption and a potentially exploitable crash. *Note: this issue only affects Firefox     on ARM64 platforms.* This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird <     68.10.0. (CVE-2020-12417)

  - Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1,     and Firefox ESR 91.12. Some of these bugs showed evidence of memory corruption and we presume that with     enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects     Thunderbird < 102.2, Thunderbird < 91.13, Firefox ESR < 91.13, Firefox ESR < 102.2, and Firefox < 104.
    (CVE-2022-38478)

  - Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to     be stored in the main compartment resulting in a use-after-free after unwrapping the proxy. This     vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. (CVE-2023-25735)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
204437	Photon OS 5.0: Mozjs PHSA-2023-5.0-0035	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	critical
190250	EulerOS 2.0 SP9 : mozjs60 (EulerOS-SA-2024-1201)	Nessus	Huawei Local Security Checks	2024/2/8	2024/2/9	high
192430	EulerOS Virtualization 2.9.1 : mozjs60 (EulerOS-SA-2024-1458)	Nessus	Huawei Local Security Checks	2024/3/21	2024/3/22	high

検出

プラグインの検索

critical

high

high