CVE-2024-5701 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-5701 Interim 1 12 2025-04-01T23:21:54Z current 2024-06-14T23:13:48Z 2025-04-01T23:21:54Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-5701 Memory safety bugs present in Firefox 126. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 127. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V/ E-Mail link for openSUSE-SU-2024:14572-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 openSUSE Tumbleweed MozillaFirefox MozillaFirefox-127.0-1.1 MozillaFirefox-branding-upstream-127.0-1.1 MozillaFirefox-devel MozillaFirefox-devel-127.0-1.1 MozillaFirefox-translations-common MozillaFirefox-translations-common-127.0-1.1 MozillaFirefox-translations-other MozillaFirefox-translations-other-127.0-1.1 firefox-esr-128.5.1-1.1 firefox-esr-branding-upstream-128.5.1-1.1 firefox-esr-translations-common-128.5.1-1.1 firefox-esr-translations-other-128.5.1-1.1 MozillaFirefox-127.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-branding-upstream-127.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-devel-127.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-translations-common-127.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-translations-other-127.0-1.1 as a component of openSUSE Tumbleweed firefox-esr-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-branding-upstream-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-common-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-other-128.5.1-1.1 as a component of openSUSE Tumbleweed MozillaFirefox as a component of SUSE Linux Enterprise Server 11 SP4 LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 MozillaFirefox as a component of SUSE OpenStack Cloud 9 MozillaFirefox-devel as a component of SUSE OpenStack Cloud 9 MozillaFirefox-translations-common as a component of SUSE OpenStack Cloud 9 MozillaFirefox as a component of SUSE OpenStack Cloud Crowbar 9 MozillaFirefox-devel as a component of SUSE OpenStack Cloud Crowbar 9 MozillaFirefox-translations-common as a component of SUSE OpenStack Cloud Crowbar 9 Memory safety bugs present in Firefox 126. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 127. CVE-2024-5701 openSUSE Tumbleweed:MozillaFirefox-127.0-1.1 openSUSE Tumbleweed:MozillaFirefox-branding-upstream-127.0-1.1 openSUSE Tumbleweed:MozillaFirefox-devel-127.0-1.1 openSUSE Tumbleweed:MozillaFirefox-translations-common-127.0-1.1 openSUSE Tumbleweed:MozillaFirefox-translations-other-127.0-1.1 openSUSE Tumbleweed:firefox-esr-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-branding-upstream-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-translations-common-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-translations-other-128.5.1-1.1 critical