Paper/Archive/CVE-2021-29978

CVE-2021-29978

Mozilla Mozilla VPN — Multiple low security issues were discovered and fixed in a security audit of Mozilla VPN 2.x branch as part of a 3rd party security audit.

Description · from the CVE record

Multiple low security issues were discovered and fixed in a security audit of Mozilla VPN 2.x branch as part of a 3rd party security audit. This vulnerability affects Mozilla VPN < 2.3.

Affected

ProductAffectedFixed inSource
Mozilla VPNunspecified – < 2.32.3CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refmozilla.org/security/advisories/mfsa2021-31refgithub.com/mozilla-mobile/mozilla-vpn-client/issues/797refgithub.com/mozilla-mobile/mozilla-vpn-client/issues/798refgithub.com/mozilla-mobile/mozilla-vpn-client/issues/799refgithub.com/mozilla-mobile/mozilla-vpn-client/issues/800refgithub.com/mozilla-mobile/mozilla-vpn-client/issues/801refgithub.com/mozilla-mobile/mozilla-vpn-client/issues/803refgithub.com/mozilla-mobile/mozilla-vpn-client/issues/804refgithub.com/mozilla-mobile/mozilla-vpn-client/issues/805refgithub.com/mozilla-mobile/mozilla-vpn-client/issues/806refgithub.com/mozilla-mobile/mozilla-vpn-client/issues/808refgithub.com/mozilla-mobile/mozilla-vpn-client/issues/809refgithub.com/mozilla-mobile/mozilla-vpn-client/issues/810refgithub.com/mozilla-mobile/mozilla-vpn-client/issues/812refgithub.com/mozilla-mobile/mozilla-vpn-client/pull/816