The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-5013 advisory.

    [91.4.0-1.0.1]
    - Removed Upstream references
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

    [91.4.0-1]
    - Update to 91.4.0 build1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5026 advisory.

    Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially     result in the execution of arbitrary code, information disclosure or spoofing. Debian follows the extended     support releases (ESR) of Firefox. Support for the 78.x series has ended, so starting with this update     we're now following the 91.x releases. Between 78.x and 91.x, Firefox has seen a number of feature     updates. For more information please refer to https://www.mozilla.org/en-US/firefox/91.0esr/releasenotes/     For the oldstable distribution (buster) one more final toolchain update is needed, updated packages will     shortly be available as 91.4.1esr-1~deb10u1 For the stable distribution (bullseye), these problem have     been fixed in version 91.4.1esr-1~deb11u1. We recommend that you upgrade your firefox-esr packages. For     the detailed security status of firefox-esr please refer to its security tracker page at:
    https://security-tracker.debian.org/tracker/firefox-esr

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 21.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5246-1 advisory.

    Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially     crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of     service, obtain sensitive information, conduct spoofing attacks, bypass security restrictions, or execute     arbitrary code. (CVE-2021-4129, CVE-2021-4140, CVE-2021-43536, CVE-2021-43537, CVE-2021-43538,     CVE-2021-43539, CVE-2021-43541, CVE-2021-43542, CVE-2021-43543, CVE-2021-43545, CVE-2021-43656,     CVE-2022-22737, CVE-2022-22738, CVE-2022-22739, CVE-2022-22740, CVE-2022-22741, CVE-2022-22742,     CVE-2022-22743, CVE-2022-22745, CVE-2022-22747, CVE-2022-22748, CVE-2022-22751)

    It was discovered that JavaScript was unexpectedly enabled in the composition area. An attacker could     potentially exploit this in combination with another vulnerability, with unspecified impacts.
    (CVE-2021-43528)

    A buffer overflow was discovered in the Matrix chat library bundled with Thunderbird. An attacker could     potentially exploit this to cause a denial of service, or execute arbitrary code. (CVE-2021-44538)

    It was discovered that Thunderbird's OpenPGP integration only considered the inner signed message when     checking signature validity in a message that contains an additional outer MIME layer. An attacker could     potentially exploit this to trick the user into thinking that a message has a valid signature.
    (CVE-2021-4126)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
155957	Oracle Linux 8 : firefox (ELSA-2021-5013)	Nessus	Oracle Linux Local Security Checks	2021/12/9	2024/10/22	high
156191	Debian DSA-5026-1 : firefox-esr - security update	Nessus	Debian Local Security Checks	2021/12/19	2025/1/24	critical
156962	Ubuntu 21.10 : Thunderbird vulnerabilities (USN-5246-1)	Nessus	Ubuntu Local Security Checks	2022/1/22	2024/8/28	critical

偵測

搜尋 Plugin

high

critical

critical