CVE-2023-0743

CVE Details

CVE-2023-0743

Last Update

11/7/2024

NIST CVE Summary

An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.9, and Thunderbird < 115.9.

Our Official Summary

An unchecked return value in TLS handshake code could cause a potentially exploitable crash in certain versions of Firefox. This CVE is reported on container images where there are no reported instances of TLS handshake code causing crashes. Risk of this vulnerability getting exploited in Spectro Cloud products is low. Need an update from the 3rd party vendor to fix the vulnerability.

CVE Severity

7.5

Status

Ongoing

Affected Products & Versions

• Palette Enterprise airgap 4.4.18, 4.5.3, 4.5.8
• Palette Enterprise 4.5.3, 4.5.8

Revision History

• 1.0 09/15/2024 Initial Publication
• 2.0 09/15/2024 Added Palette Enterprise airgap 4.4.18 to Affected Products
• 3.0 10/10/2024 Added Palette Enterprise airgap 4.5.3 to Affected Products
• 4.0 10/14/2024 Added Palette Enterprise 4.5.3 to Affected Products
• 5.0 11/7/2024 Added Palette Enterprise & Palette Enterprise airgap 4.5.8 to Affected Products