CVE.RADIO
FREN

CVE-2022-22746

MozillaFirefoxVulnerabilityCVSS 5.9Patched

No public exploitation has been reported so far. A fixed version is available (see the table below).

Recommended action: Update to the fixed version listed for your distribution using the native package manager.

Severity metrics

CVSS 3.1 : 5.9 MEDIUM

Attack vectorNetwork (remote)
Attack complexityHigh
Privileges requiredNone
User interactionNone
ScopeUnchanged
Confidentiality impactNone
Integrity impactHigh
Availability impactNone

Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected & fixed versions by distribution

Versions are the native distribution strings (backport-aware): RHEL/Debian/SUSE backport fixes, so compare with the distro version comparator (dpkg / rpm / vercmp), not the upstream version.

DistributionPackageAffectedFixed versionStatus
SUSE:HPE Helion OpenStack 8MozillaFirefox-91.5.0-112.86.1fixed
SUSE:OpenStack Cloud 8MozillaFirefox-91.5.0-112.86.1fixed
SUSE:OpenStack Cloud 9MozillaFirefox-91.5.0-112.86.1fixed
SUSE:OpenStack Cloud Crowbar 8MozillaFirefox-91.5.0-112.86.1fixed
SUSE:OpenStack Cloud Crowbar 9MozillaFirefox-91.5.0-112.86.1fixed
SUSE:Linux Enterprise Server for SAP Applications 12 SP3MozillaFirefox-91.5.0-112.86.1fixed
SUSE:Linux Enterprise Server for SAP Applications 12 SP4MozillaFirefox-91.5.0-112.86.1fixed
SUSE:Linux Enterprise Software Development Kit 12 SP5MozillaFirefox-91.5.0-112.86.1fixed
SUSE:Linux Enterprise Server 12 SP2-BCLMozillaFirefox-91.5.0-112.86.1fixed
SUSE:Linux Enterprise Server 12 SP3-LTSSMozillaFirefox-91.5.0-112.86.1fixed
SUSE:Linux Enterprise Server 12 SP3-BCLMozillaFirefox-91.5.0-112.86.1fixed
SUSE:Linux Enterprise Server 12 SP4-LTSSMozillaFirefox-91.5.0-112.86.1fixed
SUSE:Linux Enterprise Server 12 SP5MozillaFirefox-91.5.0-112.86.1fixed
SUSE:Linux Enterprise Server for SAP Applications 12 SP5MozillaFirefox-91.5.0-112.86.1fixed
SUSE:Linux Enterprise Module for Desktop Applications 15 SP3MozillaFirefox-91.5.0-152.12.1fixed
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOSMozillaFirefox-91.5.0-152.12.1fixed
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSMozillaFirefox-91.5.0-152.12.1fixed
SUSE:Linux Enterprise Server 15 SP2-BCLMozillaFirefox-91.5.0-152.12.1fixed
SUSE:Linux Enterprise Server 15 SP2-LTSSMozillaFirefox-91.5.0-152.12.1fixed
SUSE:Linux Enterprise Server for SAP Applications 15 SP2MozillaFirefox-91.5.0-152.12.1fixed
SUSE:Manager Proxy 4.1MozillaFirefox-91.5.0-152.12.1fixed
SUSE:Manager Retail Branch Server 4.1MozillaFirefox-91.5.0-152.12.1fixed
SUSE:Manager Server 4.1MozillaFirefox-91.5.0-152.12.1fixed
SUSE:Enterprise Storage 7MozillaFirefox-91.5.0-152.12.1fixed
SUSE:Linux Enterprise High Performance Computing 15-ESPOSMozillaFirefox-91.5.0-150.15.1fixed
SUSE:Linux Enterprise High Performance Computing 15-LTSSMozillaFirefox-91.5.0-150.15.1fixed
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSMozillaFirefox-91.5.0-150.15.1fixed
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSMozillaFirefox-91.5.0-150.15.1fixed
SUSE:Linux Enterprise Server 15-LTSSMozillaFirefox-91.5.0-150.15.1fixed
SUSE:Linux Enterprise Server 15 SP1-BCLMozillaFirefox-91.5.0-150.15.1fixed
SUSE:Linux Enterprise Server 15 SP1-LTSSMozillaFirefox-91.5.0-150.15.1fixed
SUSE:Linux Enterprise Server for SAP Applications 15MozillaFirefox-91.5.0-150.15.1fixed
SUSE:Linux Enterprise Server for SAP Applications 15 SP1MozillaFirefox-91.5.0-150.15.1fixed
SUSE:Enterprise Storage 6MozillaFirefox-91.5.0-150.15.1fixed
SUSE:Linux Enterprise Server 11 SP4-LTSSMozillaFirefox-91.5.0-78.159.1fixed
SUSE:Linux Enterprise Workstation Extension 15 SP3MozillaThunderbird-91.5.0-8.51.1fixed
openSUSE:Leap 15.3MozillaFirefox-91.5.0-152.12.1fixed
openSUSE:TumbleweedMozillaFirefox-96.0-1.1fixed
openSUSE:Leap 15.3MozillaThunderbird-91.5.0-8.51.1fixed
openSUSE:TumbleweedMozillaThunderbird-91.5.0-1.1fixed
openSUSE:Tumbleweedfirefox-esr-128.5.1-1.1fixed

Sources