遠端 Scientific Linux 7 主機上安裝的套件受到 SLSA-2021: 5014-1 公告中提及的多個弱點影響。

  - Mozilla：在 Firefox 95 和 Firefox ESR 已修正記憶體安全性錯誤 91.4 Mozilla：URL leakage when navigating while executing asynchronous function (CVE-2021-43536)

  - Mozilla：Heap buffer overflow when using structured clone (CVE-2021-43537)

  - Mozilla：Missing fullscreen and pointer lock notification when requesting both (CVE-2021-43538)

  - Mozilla：GC rooting failure when calling wasm instance methods (CVE-2021-43539)

  - Mozilla：External protocol handler parameters were unescaped (CVE-2021-43541)

  - Mozilla：XMLHttpRequest error codes could have leaked the existence of an external protocol handler (CVE-2021-43542)

  - Mozilla：Bypass of CSP sandbox directive when embedding (CVE-2021-43543)

  - Mozilla：Denial of Service when using the Location API in a loop (CVE-2021-43545)

  - Mozilla：Cursor spoofing could overlay user interface when native cursor is zoomed (CVE-2021-43546)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

偵測

Scientific Linux 安全性更新：SL7.x i686/x86_64 上的 firefox (2021:5014)

high Nessus Plugin ID 155953

找不到依附元件