ALPINE-CVE-2021-43538

See a problem?
Please try reporting it to the source first.

Source

https://security.alpinelinux.org/vuln/CVE-2021-43538

Import Source

https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json

JSON Data

https://api.osv.dev/v1/vulns/ALPINE-CVE-2021-43538

Upstream

CVE-2021-43538

Published

2021-12-08T22:15:09Z

Modified

2026-11-03T06:31:47Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator

Summary

[none]

Details

By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

References

https://security.alpinelinux.org/vuln/CVE-2021-43538

Affected packages

Alpine:v3.15

firefox-esr

Package

Name: firefox-esr
Purl: pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

Alpine:v3.16

firefox

Package

Name: firefox
Purl: pkg:apk/alpine/firefox?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

95.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

firefox-esr

Package

Name: firefox-esr
Purl: pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

thunderbird

Package

Name: thunderbird
Purl: pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

Alpine:v3.17

firefox

Package

Name: firefox
Purl: pkg:apk/alpine/firefox?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

95.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

firefox-esr

Package

Name: firefox-esr
Purl: pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

thunderbird

Package

Name: thunderbird
Purl: pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

Alpine:v3.18

firefox

Package

Name: firefox
Purl: pkg:apk/alpine/firefox?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

95.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

firefox-esr

Package

Name: firefox-esr
Purl: pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

thunderbird

Package

Name: thunderbird
Purl: pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

Alpine:v3.19

firefox

Package

Name: firefox
Purl: pkg:apk/alpine/firefox?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

95.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

firefox-esr

Package

Name: firefox-esr
Purl: pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

thunderbird

Package

Name: thunderbird
Purl: pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

Alpine:v3.20

firefox

Package

Name: firefox
Purl: pkg:apk/alpine/firefox?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

95.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

firefox-esr

Package

Name: firefox-esr
Purl: pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

thunderbird

Package

Name: thunderbird
Purl: pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

Alpine:v3.21

firefox

Package

Name: firefox
Purl: pkg:apk/alpine/firefox?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

95.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

firefox-esr

Package

Name: firefox-esr
Purl: pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

librewolf

Package

Name: librewolf
Purl: pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

95.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

thunderbird

Package

Name: thunderbird
Purl: pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

Alpine:v3.22

firefox

Package

Name: firefox
Purl: pkg:apk/alpine/firefox?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

95.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

firefox-esr

Package

Name: firefox-esr
Purl: pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

librewolf

Package

Name: librewolf
Purl: pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

95.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

thunderbird

Package

Name: thunderbird
Purl: pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

Alpine:v3.23

firefox

Package

Name: firefox
Purl: pkg:apk/alpine/firefox?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

95.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

firefox-esr

Package

Name: firefox-esr
Purl: pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

librewolf

Package

Name: librewolf
Purl: pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

95.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

thunderbird

Package

Name: thunderbird
Purl: pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

91.4.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"

Alpine:v3.24

librewolf

Package

Name: librewolf
Purl: pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

95.0-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-43538.json"