usn-6750-1
Vulnerability from osv_ubuntu
Published
2024-04-25 03:24
Modified
2026-04-22 07:37
Summary
thunderbird vulnerabilities
Details

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code. (CVE-2024-2609, CVE-2024-3852, CVE-2024-3864)

Bartek Nowotarski discovered that Thunderbird did not properly limit HTTP/2 CONTINUATION frames. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-3302)

Lukas Bernhard discovered that Thunderbird did not properly manage memory during JIT optimisations, leading to an out-of-bounds read vulnerability. An attacker could possibly use this issue to cause a denial of service or expose sensitive information. (CVE-2024-3854)

Lukas Bernhard discovered that Thunderbird did not properly manage memory when handling JIT created code during garbage collection. An attacker could potentially exploit this issue to cause a denial of service, or execute arbitrary code. (CVE-2024-3857)

Ronald Crane discovered that Thunderbird did not properly manage memory in the OpenType sanitizer on 32-bit devices, leading to an out-of-bounds read vulnerability. An attacker could possibly use this issue to cause a denial of service or expose sensitive information. (CVE-2024-3859)

Ronald Crane discovered that Thunderbird did not properly manage memory when handling an AlignedBuffer. An attacker could potentially exploit this issue to cause denial of service, or execute arbitrary code. (CVE-2024-3861)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2024-2609",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3302",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3852",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3854",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3857",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3859",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3861",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3864",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "thunderbird",
            "binary_version": "1:115.10.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "thunderbird-gnome-support",
            "binary_version": "1:115.10.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "thunderbird-mozsymbols",
            "binary_version": "1:115.10.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "xul-ext-calendar-timezones",
            "binary_version": "1:115.10.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "xul-ext-gdata-provider",
            "binary_version": "1:115.10.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "xul-ext-lightning",
            "binary_version": "1:115.10.1+build1-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "thunderbird",
        "purl": "pkg:deb/ubuntu/thunderbird@1:115.10.1+build1-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:115.10.1+build1-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:68.1.2+build1-0ubuntu1",
        "1:68.1.2+build1-0ubuntu2",
        "1:68.2.1+build1-0ubuntu1",
        "1:68.2.2+build1-0ubuntu1",
        "1:68.3.0+build2-0ubuntu1",
        "1:68.3.1+build1-0ubuntu2",
        "1:68.4.1+build1-0ubuntu1",
        "1:68.4.2+build2-0ubuntu1",
        "1:68.5.0+build1-0ubuntu1",
        "1:68.6.0+build2-0ubuntu1",
        "1:68.7.0+build1-0ubuntu1",
        "1:68.7.0+build1-0ubuntu2",
        "1:68.8.0+build2-0ubuntu0.20.04.2",
        "1:68.10.0+build1-0ubuntu0.20.04.1",
        "1:78.7.1+build1-0ubuntu0.20.04.1",
        "1:78.8.1+build1-0ubuntu0.20.04.1",
        "1:78.11.0+build1-0ubuntu0.20.04.2",
        "1:78.13.0+build1-0ubuntu0.20.04.2",
        "1:78.14.0+build1-0ubuntu0.20.04.1",
        "1:78.14.0+build1-0ubuntu0.20.04.2",
        "1:91.5.0+build1-0ubuntu0.20.04.1",
        "1:91.7.0+build2-0ubuntu0.20.04.1",
        "1:91.8.1+build1-0ubuntu0.20.04.1",
        "1:91.9.1+build1-0ubuntu0.20.04.1",
        "1:91.11.0+build2-0ubuntu0.20.04.1",
        "1:102.2.2+build1-0ubuntu0.20.04.1",
        "1:102.4.2+build2-0ubuntu0.20.04.1",
        "1:102.7.1+build2-0ubuntu0.20.04.1",
        "1:102.8.0+build2-0ubuntu0.20.04.1",
        "1:102.9.0+build1-0ubuntu0.20.04.1",
        "1:102.10.0+build2-0ubuntu0.20.04.1",
        "1:102.11.0+build1-0ubuntu0.20.04.1",
        "1:102.13.0+build1-0ubuntu0.20.04.1",
        "1:102.15.0+build1-0ubuntu0.20.04.1",
        "1:102.15.1+build1-0ubuntu0.20.04.1",
        "1:115.3.1+build1-0ubuntu0.20.04.1",
        "1:115.4.1+build1-0ubuntu0.20.04.1",
        "1:115.5.0+build1-0ubuntu0.20.04.1",
        "1:115.6.0+build2-0ubuntu0.20.04.1",
        "1:115.8.1+build1-0ubuntu0.20.04.1",
        "1:115.9.0+build1-0ubuntu0.20.04.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2024-2609",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3302",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3852",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3854",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3857",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3859",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3861",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-3864",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "thunderbird",
            "binary_version": "1:115.10.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "thunderbird-gnome-support",
            "binary_version": "1:115.10.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "thunderbird-mozsymbols",
            "binary_version": "1:115.10.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "xul-ext-calendar-timezones",
            "binary_version": "1:115.10.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "xul-ext-gdata-provider",
            "binary_version": "1:115.10.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "xul-ext-lightning",
            "binary_version": "1:115.10.1+build1-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "thunderbird",
        "purl": "pkg:deb/ubuntu/thunderbird@1:115.10.1+build1-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:115.10.1+build1-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:91.1.2+build1-0ubuntu1",
        "1:91.3.0+build2-0ubuntu1",
        "1:91.3.1+build1-0ubuntu1",
        "1:91.3.2+build1-0ubuntu1",
        "1:91.4.0+build1.1-0ubuntu1",
        "1:91.4.0+build2-0ubuntu1",
        "1:91.5.0+build1-0ubuntu1",
        "1:91.5.1+build1-0ubuntu1",
        "1:91.6.1+build1-0ubuntu1",
        "1:91.7.0+build1-0ubuntu1",
        "1:91.7.0+build2-0ubuntu1",
        "1:91.8.0+build2-0ubuntu1",
        "1:91.9.1+build1-0ubuntu0.22.04.1",
        "1:91.11.0+build2-0ubuntu0.22.04.1",
        "1:102.2.2+build1-0ubuntu0.22.04.1",
        "1:102.4.2+build2-0ubuntu0.22.04.1",
        "1:102.7.1+build2-0ubuntu0.22.04.1",
        "1:102.8.0+build2-0ubuntu0.22.04.1",
        "1:102.9.0+build1-0ubuntu0.22.04.1",
        "1:102.10.0+build2-0ubuntu0.22.04.1",
        "1:102.11.0+build1-0ubuntu0.22.04.1",
        "1:102.13.0+build1-0ubuntu0.22.04.1",
        "1:102.15.0+build1-0ubuntu0.22.04.1",
        "1:102.15.1+build1-0ubuntu0.22.04.1",
        "1:115.3.1+build1-0ubuntu0.22.04.2",
        "1:115.4.1+build1-0ubuntu0.22.04.1",
        "1:115.5.0+build1-0ubuntu0.22.04.1",
        "1:115.6.0+build2-0ubuntu0.22.04.1",
        "1:115.8.1+build1-0ubuntu0.22.04.1",
        "1:115.9.0+build1-0ubuntu0.22.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Multiple security issues were discovered in Thunderbird. If a user were\ntricked into opening a specially crafted website in a browsing context, an\nattacker could potentially exploit these to cause a denial of service,\nobtain sensitive information, bypass security restrictions, cross-site\ntracing, or execute arbitrary code. (CVE-2024-2609, CVE-2024-3852,\nCVE-2024-3864)\n\nBartek Nowotarski discovered that Thunderbird did not properly limit HTTP/2\nCONTINUATION frames. An attacker could potentially exploit this issue to\ncause a denial of service. (CVE-2024-3302)\n\nLukas Bernhard discovered that Thunderbird did not properly manage memory\nduring JIT optimisations, leading to an out-of-bounds read vulnerability.\nAn attacker could possibly use this issue to cause a denial of service or\nexpose sensitive information. (CVE-2024-3854)\n\nLukas Bernhard discovered that Thunderbird did not properly manage memory\nwhen handling JIT created code during garbage collection. An attacker\ncould potentially exploit this issue to cause a denial of service, or\nexecute arbitrary code. (CVE-2024-3857)\n\nRonald Crane discovered that Thunderbird did not properly manage memory in\nthe OpenType sanitizer on 32-bit devices, leading to an out-of-bounds read\nvulnerability. An attacker could possibly use this issue to cause a denial\nof service or expose sensitive information. (CVE-2024-3859)\n\nRonald Crane discovered that Thunderbird did not properly manage memory\nwhen handling an AlignedBuffer. An attacker could potentially exploit this\nissue to cause denial of service, or execute arbitrary code. (CVE-2024-3861)\n",
  "id": "USN-6750-1",
  "modified": "2026-04-22T07:37:08Z",
  "published": "2024-04-25T03:24:59Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6750-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-2609"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-3302"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-3852"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-3854"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-3857"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-3859"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-3861"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-3864"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "thunderbird vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2024-2609",
    "UBUNTU-CVE-2024-3302",
    "UBUNTU-CVE-2024-3852",
    "UBUNTU-CVE-2024-3854",
    "UBUNTU-CVE-2024-3857",
    "UBUNTU-CVE-2024-3859",
    "UBUNTU-CVE-2024-3861",
    "UBUNTU-CVE-2024-3864"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.