PT-2022-3948

CVE-2022-36317

·

Published

2022-07-26

·

Updated

2024-12-12

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 103 Firefox for Android versions prior to 103
Description The issue exists due to insufficient input validation. Exploitation can allow a remote attacker to cause a denial of service by visiting a website with an overly long URL, potentially causing the user interface to hang. This could lead to a permanent denial of service due to session restore. The issue only affects Firefox for Android, with other operating systems being unaffected.
Recommendations For Firefox versions prior to 103, update to version 103 or later to resolve the issue. For Firefox for Android versions prior to 103, update to version 103 or later to resolve the issue. As a temporary workaround, consider avoiding websites with overly long URLs until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2022-2306
ALT-PU-2022-2930
ALT-PU-2023-1139
ALT-PU-2023-4339
ALT-PU-2023-5754
ALT-PU-2023-6436
OPENSUSE-SU-2024:12227-1
OPENSUSE-SU-2024:14572-1
Found an issue in the description? Have something to add? Feel free to write us 👾