ALPINE-CVE-2022-34469

Source
https://security.alpinelinux.org/vuln/CVE-2022-34469
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-34469.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2022-34469
Upstream
  • CVE-2022-34469
Published
2022-12-22T20:15:31Z
Modified
2026-11-03T07:30:39Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error. On Firefox for Android, the user was presented with the option to bypass the error; this could only have been done by the user explicitly.
This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 102.

References

Affected packages

Alpine:v3.17
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
102.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-34469.json"
Alpine:v3.18
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
102.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-34469.json"
Alpine:v3.19
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
102.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-34469.json"
Alpine:v3.20
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
102.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-34469.json"
Alpine:v3.21
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
102.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-34469.json"
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
102.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-34469.json"
Alpine:v3.22
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
102.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-34469.json"
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
102.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-34469.json"
Alpine:v3.23
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
102.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-34469.json"
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
102.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-34469.json"
Alpine:v3.24
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
102.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-34469.json"