CVE-2021-4127 - Vulnerability Details

Vendors	Products
Mozilla	Firefox Esr Thunderbird
Redhat	Enterprise Linux Rhel Eus

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 7
firefox-0:78.9.0-1.el7_9	cpe:/o:redhat:enterprise_linux:7	RHSA-2021:0992	2021-03-25T00:00:00Z
thunderbird-0:78.9.0-3.el7_9	cpe:/o:redhat:enterprise_linux:7	RHSA-2021:0996	2021-03-25T00:00:00Z
Red Hat Enterprise Linux 8
firefox-0:78.9.0-1.el8_3	cpe:/a:redhat:enterprise_linux:8	RHSA-2021:0990	2021-03-25T00:00:00Z
thunderbird-0:78.9.0-3.el8_3	cpe:/a:redhat:enterprise_linux:8	RHSA-2021:0993	2021-03-25T00:00:00Z
Red Hat Enterprise Linux 8.1 Extended Update Support
firefox-0:78.9.0-1.el8_1	cpe:/a:redhat:rhel_eus:8.1	RHSA-2021:0991	2021-03-25T00:00:00Z
thunderbird-0:78.9.0-3.el8_1	cpe:/a:redhat:rhel_eus:8.1	RHSA-2021:0995	2021-03-25T00:00:00Z
Red Hat Enterprise Linux 8.2 Extended Update Support
firefox-0:78.9.0-1.el8_2	cpe:/a:redhat:rhel_eus:8.2	RHSA-2021:0989	2021-03-25T00:00:00Z
thunderbird-0:78.9.0-3.el8_2	cpe:/a:redhat:rhel_eus:8.2	RHSA-2021:0994	2021-03-25T00:00:00Z

Link	Providers
https://bugzilla.mozilla.org/show_bug.cgi?id=1691547
https://nvd.nist.gov/vuln/detail/CVE-2021-4127
https://www.cve.org/CVERecord?id=CVE-2021-4127
https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-4127
https://www.mozilla.org/en-US/security/advisories/mfsa2021-12/#CVE-2021-4127
https://www.mozilla.org/security/advisories/mfsa2021-11/
https://www.mozilla.org/security/advisories/mfsa2021-12/

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2021-4127", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "assignerShortName": "mozilla", "dateUpdated": "2025-04-16T15:51:21.077Z", "dateReserved": "2021-12-16T00:00:00.000Z", "datePublished": "2022-12-22T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2022-12-22T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird < 78.9 and Firefox ESR < 78.9."}], "affected": [{"vendor": "Mozilla", "product": "Thunderbird", "versions": [{"version": "unspecified", "lessThan": "78.9", "status": "affected", "versionType": "custom"}]}, {"vendor": "Mozilla", "product": "Firefox ESR", "versions": [{"version": "unspecified", "lessThan": "78.9", "status": "affected", "versionType": "custom"}]}], "references": [{"url": "https://www.mozilla.org/security/advisories/mfsa2021-12/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2021-11/"}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1691547"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "Angle graphics library out of date"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T17:16:04.261Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.mozilla.org/security/advisories/mfsa2021-12/", "tags": ["x_transferred"]}, {"url": "https://www.mozilla.org/security/advisories/mfsa2021-11/", "tags": ["x_transferred"]}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1691547", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-04-16T15:35:14.376131Z", "id": "CVE-2021-4127", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-16T15:51:21.077Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2021-4127 (string)

assignerOrgId : f16b083a-5664-49f3-a51e-8d479e5ed7fe (string)

assignerShortName : mozilla (string)

dateUpdated : 2025-04-16T15:51:21.077Z (string)

dateReserved : 2021-12-16T00:00:00.000Z (string)

datePublished : 2022-12-22T00:00:00.000Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : f16b083a-5664-49f3-a51e-8d479e5ed7fe (string)

shortName : mozilla (string)

dateUpdated : 2022-12-22T00:00:00.000Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird < 78.9 and Firefox ESR < 78.9. (string)

}

]

affected : [ »

0 : { »

vendor : Mozilla (string)

product : Thunderbird (string)

versions : [ »

0 : { »

version : unspecified (string)

lessThan : 78.9 (string)

status : affected (string)

versionType : custom (string)

}

]

}

1 : { »

vendor : Mozilla (string)

product : Firefox ESR (string)

versions : [ »

0 : { »

version : unspecified (string)

lessThan : 78.9 (string)

status : affected (string)

versionType : custom (string)

}

]

}

]

references : [ »

0 : { »

url : https://www.mozilla.org/security/advisories/mfsa2021-12/ (string)

}

1 : { »

url : https://www.mozilla.org/security/advisories/mfsa2021-11/ (string)

}

2 : { »

url : https://bugzilla.mozilla.org/show_bug.cgi?id=1691547 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : Angle graphics library out of date (string)

}

]

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T17:16:04.261Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.mozilla.org/security/advisories/mfsa2021-12/ (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://www.mozilla.org/security/advisories/mfsa2021-11/ (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://bugzilla.mozilla.org/show_bug.cgi?id=1691547 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

description : CWE-noinfo Not enough information (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 9.8 (number)

attackVector : NETWORK (string)

baseSeverity : CRITICAL (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-04-16T15:35:14.376131Z (string)

id : CVE-2021-4127 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-16T15:51:21.077Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.mozilla.org/security/advisories/mfsa2021-12/", "tags": ["x_transferred"]}, {"url": "https://www.mozilla.org/security/advisories/mfsa2021-11/", "tags": ["x_transferred"]}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1691547", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T17:16:04.261Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2021-4127", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-16T15:35:14.376131Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-16T15:35:44.264Z"}}], "cna": {"affected": [{"vendor": "Mozilla", "product": "Thunderbird", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "78.9", "versionType": "custom"}]}, {"vendor": "Mozilla", "product": "Firefox ESR", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "78.9", "versionType": "custom"}]}], "references": [{"url": "https://www.mozilla.org/security/advisories/mfsa2021-12/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2021-11/"}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1691547"}], "descriptions": [{"lang": "en", "value": "An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird < 78.9 and Firefox ESR < 78.9."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "Angle graphics library out of date"}]}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2022-12-22T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2021-4127", "state": "PUBLISHED", "dateUpdated": "2025-04-16T15:51:21.077Z", "dateReserved": "2021-12-16T00:00:00.000Z", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "datePublished": "2022-12-22T00:00:00.000Z", "assignerShortName": "mozilla"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.mozilla.org/security/advisories/mfsa2021-12/ (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://www.mozilla.org/security/advisories/mfsa2021-11/ (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://bugzilla.mozilla.org/show_bug.cgi?id=1691547 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T17:16:04.261Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 9.8 (number)

attackVector : NETWORK (string)

baseSeverity : CRITICAL (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2021-4127 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-04-16T15:35:14.376131Z (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

description : CWE-noinfo Not enough information (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-16T15:35:44.264Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : Mozilla (string)

product : Thunderbird (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 78.9 (string)

versionType : custom (string)

}

]

}

1 : { »

vendor : Mozilla (string)

product : Firefox ESR (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 78.9 (string)

versionType : custom (string)

}

]

}

]

references : [ »

0 : { »

url : https://www.mozilla.org/security/advisories/mfsa2021-12/ (string)

}

1 : { »

url : https://www.mozilla.org/security/advisories/mfsa2021-11/ (string)

}

2 : { »

url : https://bugzilla.mozilla.org/show_bug.cgi?id=1691547 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird < 78.9 and Firefox ESR < 78.9. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : text (string)

description : Angle graphics library out of date (string)

}

]

}

]

providerMetadata : { »

orgId : f16b083a-5664-49f3-a51e-8d479e5ed7fe (string)

shortName : mozilla (string)

dateUpdated : 2022-12-22T00:00:00.000Z (string)

}

cveMetadata : { »

cveId : CVE-2021-4127 (string)

state : PUBLISHED (string)

dateUpdated : 2025-04-16T15:51:21.077Z (string)

dateReserved : 2021-12-16T00:00:00.000Z (string)

assignerOrgId : f16b083a-5664-49f3-a51e-8d479e5ed7fe (string)

datePublished : 2022-12-22T00:00:00.000Z (string)

assignerShortName : mozilla (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*", "matchCriteriaId": "0E9CAC60-A12B-423F-BAAD-8778E3F70FF8", "versionEndExcluding": "78.9.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "matchCriteriaId": "637786D2-794E-4BD9-B94C-1BEF7DE6F6A3", "versionEndExcluding": "78.9.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird < 78.9 and Firefox ESR < 78.9."}, {"lang": "es", "value": "Una librer\u00eda de gr\u00e1ficos desactualizada (Angle) probablemente conten\u00eda vulnerabilidades que podr\u00edan explotarse. Esta vulnerabilidad afecta a Thunderbird &lt; 78.9 y Firefox ESR &lt; 78.9."}], "id": "CVE-2021-4127", "lastModified": "2025-04-16T16:15:18.627", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2022-12-22T20:15:11.787", "references": [{"source": "security@mozilla.org", "tags": ["Exploit", "Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1691547"}, {"source": "security@mozilla.org", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2021-11/"}, {"source": "security@mozilla.org", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2021-12/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1691547"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2021-11/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2021-12/"}], "sourceIdentifier": "security@mozilla.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0E9CAC60-A12B-423F-BAAD-8778E3F70FF8 (string)

versionEndExcluding : 78.9.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 637786D2-794E-4BD9-B94C-1BEF7DE6F6A3 (string)

versionEndExcluding : 78.9.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird < 78.9 and Firefox ESR < 78.9. (string)

}

1 : { »

lang : es (string)

value : Una librería de gráficos desactualizada (Angle) probablemente contenía vulnerabilidades que podrían explotarse. Esta vulnerabilidad afecta a Thunderbird < 78.9 y Firefox ESR < 78.9. (string)

}

]

id : CVE-2021-4127 (string)

lastModified : 2025-04-16T16:15:18.627 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2022-12-22T20:15:11.787 (string)

references : [ »

0 : { »

source : security@mozilla.org (string)

tags : [ »

0 : Exploit (string)

1 : Issue Tracking (string)

2 : Patch (string)

3 : Vendor Advisory (string)

]

url : https://bugzilla.mozilla.org/show_bug.cgi?id=1691547 (string)

}

1 : { »

source : security@mozilla.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.mozilla.org/security/advisories/mfsa2021-11/ (string)

}

2 : { »

source : security@mozilla.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.mozilla.org/security/advisories/mfsa2021-12/ (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Issue Tracking (string)

2 : Patch (string)

3 : Vendor Advisory (string)

]

url : https://bugzilla.mozilla.org/show_bug.cgi?id=1691547 (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.mozilla.org/security/advisories/mfsa2021-11/ (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.mozilla.org/security/advisories/mfsa2021-12/ (string)

}

]

sourceIdentifier : security@mozilla.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Show plain JSON

{"acknowledgement": "Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges Abraruddin Khan and Omair and Mozilla Developers as the original reporters.", "affected_release": [{"advisory": "RHSA-2021:0992", "cpe": "cpe:/o:redhat:enterprise_linux:7", "package": "firefox-0:78.9.0-1.el7_9", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2021-03-25T00:00:00Z"}, {"advisory": "RHSA-2021:0996", "cpe": "cpe:/o:redhat:enterprise_linux:7", "package": "thunderbird-0:78.9.0-3.el7_9", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2021-03-25T00:00:00Z"}, {"advisory": "RHSA-2021:0990", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "firefox-0:78.9.0-1.el8_3", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2021-03-25T00:00:00Z"}, {"advisory": "RHSA-2021:0993", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "thunderbird-0:78.9.0-3.el8_3", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2021-03-25T00:00:00Z"}, {"advisory": "RHSA-2021:0991", "cpe": "cpe:/a:redhat:rhel_eus:8.1", "package": "firefox-0:78.9.0-1.el8_1", "product_name": "Red Hat Enterprise Linux 8.1 Extended Update Support", "release_date": "2021-03-25T00:00:00Z"}, {"advisory": "RHSA-2021:0995", "cpe": "cpe:/a:redhat:rhel_eus:8.1", "package": "thunderbird-0:78.9.0-3.el8_1", "product_name": "Red Hat Enterprise Linux 8.1 Extended Update Support", "release_date": "2021-03-25T00:00:00Z"}, {"advisory": "RHSA-2021:0989", "cpe": "cpe:/a:redhat:rhel_eus:8.2", "package": "firefox-0:78.9.0-1.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Extended Update Support", "release_date": "2021-03-25T00:00:00Z"}, {"advisory": "RHSA-2021:0994", "cpe": "cpe:/a:redhat:rhel_eus:8.2", "package": "thunderbird-0:78.9.0-3.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Extended Update Support", "release_date": "2021-03-25T00:00:00Z"}], "bugzilla": {"description": "Mozilla: Angle graphics library out of date", "id": "1942784", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1942784"}, "csaw": false, "cvss3": {"cvss3_base_score": "9.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-119", "details": ["An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird < 78.9 and Firefox ESR < 78.9.", "The Mozilla Foundation Security Advisory describes this issue as:\nAn out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited."], "name": "CVE-2021-4127", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "thunderbird", "product_name": "Red Hat Enterprise Linux 6"}], "public_date": "2021-03-23T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-4127\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-4127\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-4127\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2021-12/#CVE-2021-4127"], "statement": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", "threat_severity": "Important"}

{

acknowledgement : Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges Abraruddin Khan and Omair and Mozilla Developers as the original reporters. (string)

affected_release : [ »

0 : { »

advisory : RHSA-2021:0992 (string)

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

package : firefox-0:78.9.0-1.el7_9 (string)

product_name : Red Hat Enterprise Linux 7 (string)

release_date : 2021-03-25T00:00:00Z (string)

}

1 : { »

advisory : RHSA-2021:0996 (string)

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

package : thunderbird-0:78.9.0-3.el7_9 (string)

product_name : Red Hat Enterprise Linux 7 (string)

release_date : 2021-03-25T00:00:00Z (string)

}

2 : { »

advisory : RHSA-2021:0990 (string)

cpe : cpe:/a:redhat:enterprise_linux:8 (string)

package : firefox-0:78.9.0-1.el8_3 (string)

product_name : Red Hat Enterprise Linux 8 (string)

release_date : 2021-03-25T00:00:00Z (string)

}

3 : { »

advisory : RHSA-2021:0993 (string)

cpe : cpe:/a:redhat:enterprise_linux:8 (string)

package : thunderbird-0:78.9.0-3.el8_3 (string)

product_name : Red Hat Enterprise Linux 8 (string)

release_date : 2021-03-25T00:00:00Z (string)

}

4 : { »

advisory : RHSA-2021:0991 (string)

cpe : cpe:/a:redhat:rhel_eus:8.1 (string)

package : firefox-0:78.9.0-1.el8_1 (string)

product_name : Red Hat Enterprise Linux 8.1 Extended Update Support (string)

release_date : 2021-03-25T00:00:00Z (string)

}

5 : { »

advisory : RHSA-2021:0995 (string)

cpe : cpe:/a:redhat:rhel_eus:8.1 (string)

package : thunderbird-0:78.9.0-3.el8_1 (string)

product_name : Red Hat Enterprise Linux 8.1 Extended Update Support (string)

release_date : 2021-03-25T00:00:00Z (string)

}

6 : { »

advisory : RHSA-2021:0989 (string)

cpe : cpe:/a:redhat:rhel_eus:8.2 (string)

package : firefox-0:78.9.0-1.el8_2 (string)

product_name : Red Hat Enterprise Linux 8.2 Extended Update Support (string)

release_date : 2021-03-25T00:00:00Z (string)

}

7 : { »

advisory : RHSA-2021:0994 (string)

cpe : cpe:/a:redhat:rhel_eus:8.2 (string)

package : thunderbird-0:78.9.0-3.el8_2 (string)

product_name : Red Hat Enterprise Linux 8.2 Extended Update Support (string)

release_date : 2021-03-25T00:00:00Z (string)

}

]

bugzilla : { »

description : Mozilla: Angle graphics library out of date (string)

id : 1942784 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=1942784 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 9.8 (string)

cvss3_scoring_vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

status : verified (string)

}

cwe : CWE-119 (string)

details : [ »

0 : An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird < 78.9 and Firefox ESR < 78.9. (string)

1 : The Mozilla Foundation Security Advisory describes this issue as: An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. (string)

]

name : CVE-2021-4127 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Out of support scope (string)

package_name : firefox (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Out of support scope (string)

package_name : thunderbird (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

]

public_date : 2021-03-23T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2021-4127 https://nvd.nist.gov/vuln/detail/CVE-2021-4127 https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-4127 https://www.mozilla.org/en-US/security/advisories/mfsa2021-12/#CVE-2021-4127 (string)

]

statement : Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory. (string)

threat_severity : Important (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object