The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5816-1 advisory.

    Niklas Baumstark discovered that a compromised web child process of Firefox could disable web security     opening restrictions, leading to a new child process being spawned within the file:// context. An attacker     could potentially exploits this to obtain sensitive information. (CVE-2023-23597)

    Tom Schuster discovered that Firefox was not performing a validation check on GTK drag data. An attacker     could potentially exploits this to obtain sensitive information. (CVE-2023-23598)

    Vadim discovered that Firefox was not properly sanitizing a curl command output when copying a network     request from the developer tools panel. An attacker could potentially exploits this to hide and execute     arbitrary commands. (CVE-2023-23599)

    Luan Herrera discovered that Firefox was not stopping navigation when dragging a URL from a cross-origin     iframe into the same tab. An attacker potentially exploits this to spoof the user. (CVE-2023-23601)

    Dave Vandyke discovered that Firefox did not properly implement CSP policy when creating a WebSocket in a     WebWorker. An attacker who was able to inject markup into a page otherwise protected by a Content Security     Policy may have been able to inject an executable script. (CVE-2023-23602)

    Dan Veditz discovered that Firefox did not properly implement CSP policy on regular expression when using     console.log. An attacker potentially exploits this to exfiltrate data from the browser. (CVE-2023-23603)

    Nika Layzell discovered that Firefox was not performing a validation check when parsing a non-system html     document via DOMParser::ParseFromSafeString. An attacker potentially exploits this to bypass web security     checks. (CVE-2023-23604)

    Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service, obtain     sensitive information across domains, or execute arbitrary code. (CVE-2023-23605, CVE-2023-23606)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5816-1)

high Nessus Plugin ID 170280

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Aug 29, 2024, 4:23 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408291623
Version 1.2 Jul 11, 2023, 1:48 AM Detection CVSSv3 score source (changed from "CVE-2023-23605" to "CVE-2023-23606") CVSSv2 score source (changed from "CVE-2023-23603" to "CVE-2023-23606") CVSS metrics ("CVSSv2 score" changed from 7.8 to 10.0. "CVSSv3 score" changed from 7.5 to 8.8. "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202307110148
Version 1.1 Feb 16, 2023, 6:11 PM IAVM reference Plugin Feed: 202302161811
Version 1.0 Jan 23, 2023, 4:10 PM New Plugin Feed: 202301231610