| Name | CVE-2023-4055 |
| Description | When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie jar state. This could have caused requests to be sent with some cookies missing. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-3521-1, DLA-3523-1, DSA-5464-1, DSA-5469-1 |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| firefox (PTS) | sid | 132.0.2-1 | fixed |
| firefox-esr (PTS) | jessie, jessie (lts) | 68.9.0esr-1~deb8u2 | vulnerable |
| stretch (security), stretch (lts), stretch | 91.11.0esr-1~deb9u1 | vulnerable | |
| buster (security), buster, buster (lts) | 115.12.0esr-1~deb10u1 | fixed | |
| bullseye | 115.14.0esr-1~deb11u1 | fixed | |
| bullseye (security) | 128.4.0esr-1~deb11u1 | fixed | |
| bookworm | 128.3.1esr-1~deb12u1 | fixed | |
| bookworm (security) | 128.4.0esr-1~deb12u1 | fixed | |
| sid, trixie | 128.4.0esr-1 | fixed | |
| thunderbird (PTS) | jessie, jessie (lts) | 1:68.9.0-1~deb8u2 | vulnerable |
| stretch (security), stretch (lts), stretch | 1:91.10.0-1~deb9u1 | vulnerable | |
| buster (security), buster, buster (lts) | 1:115.12.0-1~deb10u1 | fixed | |
| bullseye | 1:115.12.0-1~deb11u1 | fixed | |
| bullseye (security) | 1:128.4.3esr-1~deb11u1 | fixed | |
| bookworm | 1:115.16.0esr-1~deb12u1 | fixed | |
| bookworm (security) | 1:128.4.3esr-1~deb12u1 | fixed | |
| sid, trixie | 1:128.4.3esr-1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| firefox | source | (unstable) | 116.0-1 | |||
| firefox-esr | source | jessie | (unfixed) | end-of-life | ||
| firefox-esr | source | stretch | (unfixed) | end-of-life | ||
| firefox-esr | source | buster | 102.14.0esr-1~deb10u1 | DLA-3523-1 | ||
| firefox-esr | source | bullseye | 102.14.0esr-1~deb11u1 | DSA-5464-1 | ||
| firefox-esr | source | bookworm | 102.14.0esr-1~deb12u1 | DSA-5464-1 | ||
| firefox-esr | source | (unstable) | 115.1.0esr-1 | |||
| thunderbird | source | jessie | (unfixed) | end-of-life | ||
| thunderbird | source | stretch | (unfixed) | end-of-life | ||
| thunderbird | source | buster | 1:102.14.0-1~deb10u1 | DLA-3521-1 | ||
| thunderbird | source | bullseye | 1:102.14.0-1~deb11u1 | DSA-5469-1 | ||
| thunderbird | source | bookworm | 1:102.14.0-1~deb12u1 | DSA-5469-1 | ||
| thunderbird | source | (unstable) | 1:115.1.0-1 |
https://www.mozilla.org/en-US/security/advisories/mfsa2023-29/#CVE-2023-4055
https://www.mozilla.org/en-US/security/advisories/mfsa2023-30/#CVE-2023-4055
https://www.mozilla.org/en-US/security/advisories/mfsa2023-31/#CVE-2023-4055
https://www.mozilla.org/en-US/security/advisories/mfsa2023-32/#CVE-2023-4055
https://www.mozilla.org/en-US/security/advisories/mfsa2023-33/#CVE-2023-4055