The remote Ubuntu 21.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5246-1 advisory.

    Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially     crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of     service, obtain sensitive information, conduct spoofing attacks, bypass security restrictions, or execute     arbitrary code. (CVE-2021-4129, CVE-2021-4140, CVE-2021-43536, CVE-2021-43537, CVE-2021-43538,     CVE-2021-43539, CVE-2021-43541, CVE-2021-43542, CVE-2021-43543, CVE-2021-43545, CVE-2021-43656,     CVE-2022-22737, CVE-2022-22738, CVE-2022-22739, CVE-2022-22740, CVE-2022-22741, CVE-2022-22742,     CVE-2022-22743, CVE-2022-22745, CVE-2022-22747, CVE-2022-22748, CVE-2022-22751)

    It was discovered that JavaScript was unexpectedly enabled in the composition area. An attacker could     potentially exploit this in combination with another vulnerability, with unspecified impacts.
    (CVE-2021-43528)

    A buffer overflow was discovered in the Matrix chat library bundled with Thunderbird. An attacker could     potentially exploit this to cause a denial of service, or execute arbitrary code. (CVE-2021-44538)

    It was discovered that Thunderbird's OpenPGP integration only considered the inner signed message when     checking signature validity in a message that contains an additional outer MIME layer. An attacker could     potentially exploit this to trick the user into thinking that a message has a valid signature.
    (CVE-2021-4126)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 21.10 : Thunderbird vulnerabilities (USN-5246-1)

critical Nessus Plugin ID 156962

Version 1.7

Version 1.6

Version 1.5

Version 1.5

Version 1.4

Version 1.7 Aug 28, 2024, 11:02 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408282302
Version 1.6 Jul 11, 2023, 4:01 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Detection Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202307110401
Version 1.5 Jan 18, 2023, 9:01 AM Logic Changes (Added support for s390x) Plugin Feed: 202301180901
Version 1.5 Jul 11, 2023, 1:48 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Detection Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202307110148
Version 1.4 Jan 9, 2023, 4:06 PM CVSS metrics ("CVSSv3 score" changed from "9.8" to "10.0") CVSS metrics ("CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2021-4140") Plugin Feed: 202301091606