The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6074-1 advisory.

    Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service, obtain     sensitive information across domains, or execute arbitrary code. (CVE-2023-32205, CVE-2023-32207,     CVE-2023-32210, CVE-2023-32211, CVE-2023-32212, CVE-2023-32213, CVE-2023-32215, CVE-2023-32216)

    Irvan Kurniawan discovered that Firefox did not properly manage memory when using RLBox Expat driver. An     attacker could potentially exploits this issue to cause a denial of service. (CVE-2023-32206)

    Anne van Kesteren discovered that Firefox did not properly validate the import() call in service workers.
    An attacker could potentially exploits this to obtain sensitive information. (CVE-2023-32208)

    Sam Ezeh discovered that Firefox did not properly handle certain favicon image files. If a user were     tricked into opening a malicicous favicon file, an attacker could cause a denial of service.
    (CVE-2023-32209)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-6074-1)

critical Nessus Plugin ID 175671

Version 1.2