CVE-2023-5173

In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a local unprivileged webpage), leading to an out-of-bounds write to privileged process memory. *This bug only affects Firefox if a non-standard preference allowing non-HTTPS Alternate Services (`network.http.altsvc.oe`) is enabled.* This vulnerability affects Firefox < 118.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1823172	Permissions Required
https://security.gentoo.org/glsa/202401-10
https://www.mozilla.org/security/advisories/mfsa2023-41/	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

History

07 Jan 2024, 11:15

Type	Values Removed	Values Added
References		() https://security.gentoo.org/glsa/202401-10 -

29 Sep 2023, 13:34

Type	Values Removed	Values Added
First Time		Mozilla firefox Mozilla
CWE		CWE-190
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.5
CPE		cpe:2.3:a:mozilla:firefox::::::::
References	~~(MISC) https://www.mozilla.org/security/advisories/mfsa2023-41/ -~~	(MISC) https://www.mozilla.org/security/advisories/mfsa2023-41/ - Vendor Advisory
References	~~(MISC) https://bugzilla.mozilla.org/show_bug.cgi?id=1823172 -~~	(MISC) https://bugzilla.mozilla.org/show_bug.cgi?id=1823172 - Permissions Required

27 Sep 2023, 15:19

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-09-27 15:19

Updated : 2024-01-07 11:15

NVD link : CVE-2023-5173

Mitre link : CVE-2023-5173

CVE.ORG link : CVE-2023-5173

JSON object : View

Products Affected

mozilla

firefox

CWE

CWE-190

Integer Overflow or Wraparound

{"id": "CVE-2023-5173", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2023-09-27T15:19:42.340", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1823172", "tags": ["Permissions Required"], "source": "security@mozilla.org"}, {"url": "https://security.gentoo.org/glsa/202401-10", "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-41/", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a local unprivileged webpage), leading to an out-of-bounds write to privileged process memory. \n*This bug only affects Firefox if a non-standard preference allowing non-HTTPS Alternate Services (`network.http.altsvc.oe`) is enabled.* This vulnerability affects Firefox < 118."}, {"lang": "es", "value": "En una configuraci\u00f3n no est\u00e1ndar de Firefox, podr\u00eda haberse producido un desbordamiento de enteros basado en el tr\u00e1fico de la red (posiblemente bajo la influencia de una p\u00e1gina web local sin privilegios), lo que habr\u00eda provocado una escritura fuera de l\u00edmites en la memoria del proceso privilegiado. *Este error solo afecta a Firefox si est\u00e1 habilitada una preferencia no est\u00e1ndar que permite servicios alternativos no HTTPS (`network.http.altsvc.oe`).* Esta vulnerabilidad afecta a Firefox versi\u00f3n < 118."}], "lastModified": "2024-01-07T11:15:14.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2216A424-94E2-45E7-BB95-646BFC8182E1", "versionEndExcluding": "118"}], "operator": "OR"}]}], "sourceIdentifier": "security@mozilla.org"}