CVE-2024-9399
01.10.2024, 16:15
A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.Enginsight
Vendor | Product | Version |
---|---|---|
mozilla | firefox | 𝑥 < 128.3.0 |
mozilla | firefox | 129.0 ≤ 𝑥 < 131.0 |
mozilla | thunderbird | 𝑥 < 128.3.0 |
mozilla | thunderbird | 129.0 ≤ 𝑥 < 131.0 |
𝑥
= Vulnerable software versions

Debian Releases
Debian Product | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
firefox |
| ||||||||||||
thunderbird |
|

Ubuntu Releases
Ubuntu Product | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
firefox |
| ||||||||||||
mozjs102 |
| ||||||||||||
mozjs115 |
| ||||||||||||
mozjs38 |
| ||||||||||||
mozjs52 |
| ||||||||||||
mozjs68 |
| ||||||||||||
mozjs78 |
| ||||||||||||
mozjs91 |
| ||||||||||||
thunderbird |
|
Common Weakness Enumeration