UBUNTU-CVE-2022-34479
- Source
- https://ubuntu.com/security/CVE-2022-34479
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-34479.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2022-34479
- Upstream
- Downstream
- Related
- Published
- 2022-07-05T00:00:00Z
- Modified
- 2026-04-22T13:24:07Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVSS Calculator
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks.
This bug only affects Thunderbird for Linux. Other operating systems are unaffected.. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. - References
Affected packages
Ubuntu:18.04:LTS / firefox
Package
- Name
- firefox
- Purl
- pkg:deb/ubuntu/firefox@102.0+build2-0ubuntu0.18.04.1?arch=source&distro=bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed102.0+build2-0ubuntu0.18.04.1
Affected versions
56.*
56.0+build6-0ubuntu1
57.*
57.0.1+build2-0ubuntu1
59.*
59.0.1+build1-0ubuntu1
59.0.2+build1-0ubuntu1
60.*
60.0+build2-0ubuntu1
60.0.1+build2-0ubuntu0.18.04.1
60.0.2+build1-0ubuntu0.18.04.1
61.*
61.0+build3-0ubuntu0.18.04.1
61.0.1+build1-0ubuntu0.18.04.1
62.*
62.0+build2-0ubuntu0.18.04.3
62.0+build2-0ubuntu0.18.04.4
62.0+build2-0ubuntu0.18.04.5
62.0.3+build1-0ubuntu0.18.04.1
63.*
63.0+build2-0ubuntu0.18.04.2
63.0.3+build1-0ubuntu0.18.04.1
64.*
64.0+build3-0ubuntu0.18.04.1
65.*
65.0+build2-0ubuntu0.18.04.1
65.0.1+build2-0ubuntu0.18.04.1
66.*
66.0+build3-0ubuntu0.18.04.1
66.0.1+build1-0ubuntu0.18.04.1
66.0.2+build1-0ubuntu0.18.04.1
66.0.3+build1-0ubuntu0.18.04.1
66.0.4+build3-0ubuntu0.18.04.1
66.0.5+build1-0ubuntu0.18.04.1
67.*
67.0+build2-0ubuntu0.18.04.1
67.0.1+build1-0ubuntu0.18.04.1
67.0.2+build2-0ubuntu0.18.04.1
67.0.3+build1-0ubuntu0.18.04.1
67.0.4+build1-0ubuntu0.18.04.1
68.*
68.0+build3-0ubuntu0.18.04.1
68.0.1+build1-0ubuntu0.18.04.1
68.0.2+build1-0ubuntu0.18.04.1
69.*
69.0+build2-0ubuntu0.18.04.1
69.0.1+build1-0ubuntu0.18.04.1
69.0.2+build1-0ubuntu0.18.04.1
70.*
70.0+build2-0ubuntu0.18.04.1
70.0.1+build1-0ubuntu0.18.04.1
71.*
71.0+build5-0ubuntu0.18.04.1
72.*
72.0.1+build1-0ubuntu0.18.04.1
72.0.2+build1-0ubuntu0.18.04.1
73.*
73.0+build3-0ubuntu0.18.04.1
73.0.1+build1-0ubuntu0.18.04.1
74.*
74.0+build3-0ubuntu0.18.04.1
74.0.1+build1-0ubuntu0.18.04.1
75.*
75.0+build3-0ubuntu0.18.04.1
76.*
76.0+build2-0ubuntu0.18.04.1
76.0.1+build1-0ubuntu0.18.04.1
77.*
77.0.1+build1-0ubuntu0.18.04.1
78.*
78.0.1+build1-0ubuntu0.18.04.1
78.0.2+build2-0ubuntu0.18.04.1
79.*
79.0+build1-0ubuntu0.18.04.1
80.*
80.0+build2-0ubuntu0.18.04.1
80.0.1+build1-0ubuntu0.18.04.1
81.*
81.0+build2-0ubuntu0.18.04.1
81.0.2+build1-0ubuntu0.18.04.1
82.*
82.0+build2-0ubuntu0.18.04.1
82.0.2+build1-0ubuntu0.18.04.1
82.0.3+build1-0ubuntu0.18.04.1
83.*
83.0+build2-0ubuntu0.18.04.2
84.*
84.0+build3-0ubuntu0.18.04.1
84.0.1+build1-0ubuntu0.18.04.1
84.0.2+build1-0ubuntu0.18.04.1
85.*
85.0+build1-0ubuntu0.18.04.1
85.0.1+build1-0ubuntu0.18.04.1
86.*
86.0+build3-0ubuntu0.18.04.1
86.0.1+build1-0ubuntu0.18.04.1
87.*
87.0+build3-0ubuntu0.18.04.2
88.*
88.0+build2-0ubuntu0.18.04.2
88.0.1+build1-0ubuntu0.18.04.2
89.*
89.0+build2-0ubuntu0.18.04.2
89.0.1+build1-0ubuntu0.18.04.1
89.0.2+build1-0ubuntu0.18.04.1
90.*
90.0+build1-0ubuntu0.18.04.1
90.0.2+build1-0ubuntu0.18.04.1
91.*
91.0+build2-0ubuntu0.18.04.1
91.0.1+build1-0ubuntu0.18.04.1
91.0.2+build1-0ubuntu0.18.04.1
92.*
92.0+build3-0ubuntu0.18.04.1
93.*
93.0+build1-0ubuntu0.18.04.1
94.*
94.0+build3-0ubuntu0.18.04.1
95.*
95.0+build1-0ubuntu0.18.04.1
95.0.1+build2-0ubuntu0.18.04.1
96.*
96.0+build2-0ubuntu0.18.04.1
97.*
97.0+build2-0ubuntu0.18.04.1
97.0.2+build1-0ubuntu0.18.04.1
98.*
98.0+build3-0ubuntu0.18.04.2
98.0.1+build2-0ubuntu0.18.04.1
98.0.2+build1-0ubuntu0.18.04.1
99.*
99.0+build2-0ubuntu0.18.04.2
100.*
100.0+build2-0ubuntu0.18.04.1
100.0.2+build1-0ubuntu0.18.04.1
101.*
101.0.1+build1-0ubuntu0.18.04.1
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "firefox",
"binary_version": "102.0+build2-0ubuntu0.18.04.1"
},
{
"binary_name": "firefox-geckodriver",
"binary_version": "102.0+build2-0ubuntu0.18.04.1"
},
{
"binary_name": "firefox-mozsymbols",
"binary_version": "102.0+build2-0ubuntu0.18.04.1"
}
]
}
Ubuntu:18.04:LTS / thunderbird
Package
- Name
- thunderbird
- Purl
- pkg:deb/ubuntu/thunderbird@1:91.11.0+build2-0ubuntu0.18.04.1?arch=source&distro=bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1:91.11.0+build2-0ubuntu0.18.04.1
Affected versions
1:52.*
1:52.4.0+build1-0ubuntu2
1:52.6.0+build1-0ubuntu1
1:52.7.0+build1-0ubuntu1
1:52.8.0+build1-0ubuntu0.18.04.1
1:52.9.1+build3-0ubuntu0.18.04.1
1:60.*
1:60.2.1+build1-0ubuntu0.18.04.2
1:60.4.0+build2-0ubuntu0.18.04.1
1:60.5.1+build2-0ubuntu0.18.04.1
1:60.6.1+build2-0ubuntu0.18.04.1
1:60.7.0+build1-0ubuntu0.18.04.1
1:60.7.1+build1-0ubuntu0.18.04.1
1:60.7.2+build2-0ubuntu0.18.04.1
1:60.8.0+build1-0ubuntu0.18.04.1
1:60.9.0+build1-0ubuntu0.18.04.1
1:68.*
1:68.2.1+build1-0ubuntu0.18.04.1
1:68.2.2+build1-0ubuntu0.18.04.1
1:68.4.1+build1-0ubuntu0.18.04.1
1:68.7.0+build1-0ubuntu0.18.04.1
1:68.8.0+build2-0ubuntu0.18.04.2
1:68.10.0+build1-0ubuntu0.18.04.1
1:78.*
1:78.8.1+build1-0ubuntu0.18.04.1
1:78.11.0+build1-0ubuntu0.18.04.2
1:78.13.0+build1-0ubuntu0.18.04.1
1:78.14.0+build1-0ubuntu0.18.04.1
1:78.14.0+build1-0ubuntu0.18.04.2
1:91.*
1:91.5.0+build1-0ubuntu0.18.04.1
1:91.7.0+build2-0ubuntu0.18.04.1
1:91.8.1+build1-0ubuntu0.18.04.1
1:91.9.1+build1-0ubuntu0.18.04.1
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "thunderbird",
"binary_version": "1:91.11.0+build2-0ubuntu0.18.04.1"
},
{
"binary_name": "thunderbird-gnome-support",
"binary_version": "1:91.11.0+build2-0ubuntu0.18.04.1"
},
{
"binary_name": "thunderbird-mozsymbols",
"binary_version": "1:91.11.0+build2-0ubuntu0.18.04.1"
},
{
"binary_name": "xul-ext-calendar-timezones",
"binary_version": "1:91.11.0+build2-0ubuntu0.18.04.1"
},
{
"binary_name": "xul-ext-gdata-provider",
"binary_version": "1:91.11.0+build2-0ubuntu0.18.04.1"
},
{
"binary_name": "xul-ext-lightning",
"binary_version": "1:91.11.0+build2-0ubuntu0.18.04.1"
}
]
}
Ubuntu:20.04:LTS / firefox
Package
- Name
- firefox
- Purl
- pkg:deb/ubuntu/firefox@102.0+build2-0ubuntu0.20.04.1?arch=source&distro=focal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed102.0+build2-0ubuntu0.20.04.1
Affected versions
69.*
69.0.3+build1-0ubuntu1
70.*
70.0+build2-0ubuntu1
70.0+build2-0ubuntu2
70.0.1+build1-0ubuntu2
71.*
71.0+build2-0ubuntu2
71.0+build5-0ubuntu1
72.*
72.0.1+build1-0ubuntu1
72.0.2+build1-0ubuntu1
73.*
73.0+build1-0ubuntu1
73.0+build2-0ubuntu1
73.0+build3-0ubuntu1
73.0.1+build1-0ubuntu1
74.*
74.0+build1-0ubuntu1
74.0+build2-0ubuntu1
74.0+build2-0ubuntu2
74.0+build3-0ubuntu1
75.*
75.0+build3-0ubuntu1
76.*
76.0+build2-0ubuntu0.20.04.1
76.0.1+build1-0ubuntu0.20.04.1
77.*
77.0.1+build1-0ubuntu0.20.04.1
78.*
78.0.1+build1-0ubuntu0.20.04.1
78.0.2+build2-0ubuntu0.20.04.1
79.*
79.0+build1-0ubuntu0.20.04.1
80.*
80.0+build2-0ubuntu0.20.04.1
80.0.1+build1-0ubuntu0.20.04.1
81.*
81.0+build2-0ubuntu0.20.04.1
81.0.2+build1-0ubuntu0.20.04.1
82.*
82.0+build2-0ubuntu0.20.04.1
82.0.2+build1-0ubuntu0.20.04.1
82.0.3+build1-0ubuntu0.20.04.1
83.*
83.0+build2-0ubuntu0.20.04.1
84.*
84.0+build3-0ubuntu0.20.04.1
84.0.1+build1-0ubuntu0.20.04.1
84.0.2+build1-0ubuntu0.20.04.1
85.*
85.0+build1-0ubuntu0.20.04.1
85.0.1+build1-0ubuntu0.20.04.1
86.*
86.0+build3-0ubuntu0.20.04.1
86.0.1+build1-0ubuntu0.20.04.1
87.*
87.0+build3-0ubuntu0.20.04.2
88.*
88.0+build2-0ubuntu0.20.04.1
88.0.1+build1-0ubuntu0.20.04.2
89.*
89.0+build2-0ubuntu0.20.04.2
89.0.1+build1-0ubuntu0.20.04.1
89.0.2+build1-0ubuntu0.20.04.1
90.*
90.0+build1-0ubuntu0.20.04.1
90.0.2+build1-0ubuntu0.20.04.1
91.*
91.0+build2-0ubuntu0.20.04.1
91.0.1+build1-0ubuntu0.20.04.1
91.0.2+build1-0ubuntu0.20.04.1
92.*
92.0+build3-0ubuntu0.20.04.1
93.*
93.0+build1-0ubuntu0.20.04.1
94.*
94.0+build3-0ubuntu0.20.04.1
95.*
95.0+build1-0ubuntu0.20.04.1
95.0.1+build2-0ubuntu0.20.04.1
96.*
96.0+build2-0ubuntu0.20.04.1
97.*
97.0+build2-0ubuntu0.20.04.1
97.0.2+build1-0ubuntu0.20.04.1
98.*
98.0+build3-0ubuntu0.20.04.2
98.0.1+build2-0ubuntu0.20.04.1
98.0.2+build1-0ubuntu0.20.04.1
99.*
99.0+build2-0ubuntu0.20.04.2
100.*
100.0+build2-0ubuntu0.20.04.1
100.0.2+build1-0ubuntu0.20.04.1
101.*
101.0.1+build1-0ubuntu0.20.04.1
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "firefox",
"binary_version": "102.0+build2-0ubuntu0.20.04.1"
},
{
"binary_name": "firefox-geckodriver",
"binary_version": "102.0+build2-0ubuntu0.20.04.1"
},
{
"binary_name": "firefox-mozsymbols",
"binary_version": "102.0+build2-0ubuntu0.20.04.1"
}
]
}
Ubuntu:20.04:LTS / thunderbird
Package
- Name
- thunderbird
- Purl
- pkg:deb/ubuntu/thunderbird@1:91.11.0+build2-0ubuntu0.20.04.1?arch=source&distro=focal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1:91.11.0+build2-0ubuntu0.20.04.1
Affected versions
1:68.*
1:68.1.2+build1-0ubuntu1
1:68.1.2+build1-0ubuntu2
1:68.2.1+build1-0ubuntu1
1:68.2.2+build1-0ubuntu1
1:68.3.0+build2-0ubuntu1
1:68.3.1+build1-0ubuntu2
1:68.4.1+build1-0ubuntu1
1:68.4.2+build2-0ubuntu1
1:68.5.0+build1-0ubuntu1
1:68.6.0+build2-0ubuntu1
1:68.7.0+build1-0ubuntu1
1:68.7.0+build1-0ubuntu2
1:68.8.0+build2-0ubuntu0.20.04.2
1:68.10.0+build1-0ubuntu0.20.04.1
1:78.*
1:78.7.1+build1-0ubuntu0.20.04.1
1:78.8.1+build1-0ubuntu0.20.04.1
1:78.11.0+build1-0ubuntu0.20.04.2
1:78.13.0+build1-0ubuntu0.20.04.2
1:78.14.0+build1-0ubuntu0.20.04.1
1:78.14.0+build1-0ubuntu0.20.04.2
1:91.*
1:91.5.0+build1-0ubuntu0.20.04.1
1:91.7.0+build2-0ubuntu0.20.04.1
1:91.8.1+build1-0ubuntu0.20.04.1
1:91.9.1+build1-0ubuntu0.20.04.1
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "thunderbird",
"binary_version": "1:91.11.0+build2-0ubuntu0.20.04.1"
},
{
"binary_name": "thunderbird-gnome-support",
"binary_version": "1:91.11.0+build2-0ubuntu0.20.04.1"
},
{
"binary_name": "thunderbird-mozsymbols",
"binary_version": "1:91.11.0+build2-0ubuntu0.20.04.1"
},
{
"binary_name": "xul-ext-calendar-timezones",
"binary_version": "1:91.11.0+build2-0ubuntu0.20.04.1"
},
{
"binary_name": "xul-ext-gdata-provider",
"binary_version": "1:91.11.0+build2-0ubuntu0.20.04.1"
},
{
"binary_name": "xul-ext-lightning",
"binary_version": "1:91.11.0+build2-0ubuntu0.20.04.1"
}
]
}
Ubuntu:22.04:LTS / thunderbird
Package
- Name
- thunderbird
- Purl
- pkg:deb/ubuntu/thunderbird@1:91.11.0+build2-0ubuntu0.22.04.1?arch=source&distro=jammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1:91.11.0+build2-0ubuntu0.22.04.1
Affected versions
1:91.*
1:91.1.2+build1-0ubuntu1
1:91.3.0+build2-0ubuntu1
1:91.3.1+build1-0ubuntu1
1:91.3.2+build1-0ubuntu1
1:91.4.0+build1.1-0ubuntu1
1:91.4.0+build2-0ubuntu1
1:91.5.0+build1-0ubuntu1
1:91.5.1+build1-0ubuntu1
1:91.6.1+build1-0ubuntu1
1:91.7.0+build1-0ubuntu1
1:91.7.0+build2-0ubuntu1
1:91.8.0+build2-0ubuntu1
1:91.9.1+build1-0ubuntu0.22.04.1
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "thunderbird",
"binary_version": "1:91.11.0+build2-0ubuntu0.22.04.1"
},
{
"binary_name": "thunderbird-gnome-support",
"binary_version": "1:91.11.0+build2-0ubuntu0.22.04.1"
},
{
"binary_name": "thunderbird-mozsymbols",
"binary_version": "1:91.11.0+build2-0ubuntu0.22.04.1"
},
{
"binary_name": "xul-ext-calendar-timezones",
"binary_version": "1:91.11.0+build2-0ubuntu0.22.04.1"
},
{
"binary_name": "xul-ext-gdata-provider",
"binary_version": "1:91.11.0+build2-0ubuntu0.22.04.1"
},
{
"binary_name": "xul-ext-lightning",
"binary_version": "1:91.11.0+build2-0ubuntu0.22.04.1"
}
]
}