CVE-2023-23606 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-23606 Interim 1 19 2025-12-23T02:15:03Z current 2023-01-21T00:43:26Z 2025-12-23T02:15:03Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-23606 Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 109. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V/ E-Mail link for openSUSE-SU-2024:14572-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 openSUSE Tumbleweed MozillaFirefox MozillaFirefox-109.0-1.1 MozillaFirefox-branding-upstream-109.0-1.1 MozillaFirefox-devel MozillaFirefox-devel-109.0-1.1 MozillaFirefox-translations-common MozillaFirefox-translations-common-109.0-1.1 MozillaFirefox-translations-other MozillaFirefox-translations-other-109.0-1.1 MozillaThunderbird MozillaThunderbird-translations-common MozillaThunderbird-translations-other firefox-esr-128.5.1-1.1 firefox-esr-branding-upstream-128.5.1-1.1 firefox-esr-translations-common-128.5.1-1.1 firefox-esr-translations-other-128.5.1-1.1 MozillaFirefox-109.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-branding-upstream-109.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-devel-109.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-translations-common-109.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-translations-other-109.0-1.1 as a component of openSUSE Tumbleweed firefox-esr-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-branding-upstream-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-common-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-other-128.5.1-1.1 as a component of openSUSE Tumbleweed MozillaFirefox as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 MozillaFirefox-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 MozillaThunderbird as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 MozillaThunderbird as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 109. CVE-2023-23606 openSUSE Tumbleweed:MozillaFirefox-109.0-1.1 openSUSE Tumbleweed:MozillaFirefox-branding-upstream-109.0-1.1 openSUSE Tumbleweed:MozillaFirefox-devel-109.0-1.1 openSUSE Tumbleweed:MozillaFirefox-translations-common-109.0-1.1 openSUSE Tumbleweed:MozillaFirefox-translations-other-109.0-1.1 openSUSE Tumbleweed:firefox-esr-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-branding-upstream-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-translations-common-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-translations-other-128.5.1-1.1 important 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H