Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Thunderbird may crash when handling certain email traffic
published 2 years ago
Summary
If you use Mozilla Thunderbird for email, an attacker could send specially crafted internet messages that cause the program to stop responding. Updating Thunderbird to version 115.10.0 protects against this. Apply the latest update as soon as possible.
What to do
- Update almalinux thunderbird to version 115.10.0-2.el8_9.alma.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | thunderbird |
< 115.10.0-2.el8_9.alma.1 Fix: upgrade to 115.10.0-2.el8_9.alma.1
|
Original advisory text
Low: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 115.10.0.
Security Fix(es):
* Mozilla: Denial of Service using HTTP/2 CONTINUATION frames (CVE-2024-3302)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
This update upgrades Thunderbird to version 115.10.0.
Security Fix(es):
* Mozilla: Denial of Service using HTTP/2 CONTINUATION frames (CVE-2024-3302)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2024:1939 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-2609 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-3302 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-3852 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-3854 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-3857 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-3859 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-3861 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-3864 Third Party Advisory
- https://bugzilla.redhat.com/2273383 Third Party Advisory
- https://bugzilla.redhat.com/2275547 Third Party Advisory
- https://bugzilla.redhat.com/2275549 Third Party Advisory
- https://bugzilla.redhat.com/2275550 Third Party Advisory
- https://bugzilla.redhat.com/2275551 Third Party Advisory
- https://bugzilla.redhat.com/2275552 Third Party Advisory
- https://bugzilla.redhat.com/2275553 Third Party Advisory
- https://bugzilla.redhat.com/2275555 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2024-1939.html Vendor Advisory
Timeline
Published22 Apr 2024
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2024:1939 · OSV
Track software like this
Free during beta