CVE-2021-29978

Description

Multiple low security issues were discovered and fixed in a security audit of Mozilla VPN 2.x branch as part of a 3rd party security audit. This vulnerability affects Mozilla VPN < 2.3.

Affected products

• Mozilla / Mozilla VPNunspecified – 2.3

References

• VENDOR_ADVISORYhttps://www.mozilla.org/security/advisories/mfsa2021-31/
• MISChttps://github.com/mozilla-mobile/mozilla-vpn-client/issues/797
• MISChttps://github.com/mozilla-mobile/mozilla-vpn-client/issues/798
• MISChttps://github.com/mozilla-mobile/mozilla-vpn-client/issues/799
• MISChttps://github.com/mozilla-mobile/mozilla-vpn-client/issues/800
• MISChttps://github.com/mozilla-mobile/mozilla-vpn-client/issues/801
• MISChttps://github.com/mozilla-mobile/mozilla-vpn-client/issues/803
• MISChttps://github.com/mozilla-mobile/mozilla-vpn-client/issues/804
• MISChttps://github.com/mozilla-mobile/mozilla-vpn-client/issues/805
• MISChttps://github.com/mozilla-mobile/mozilla-vpn-client/issues/806
• MISChttps://github.com/mozilla-mobile/mozilla-vpn-client/issues/808
• MISChttps://github.com/mozilla-mobile/mozilla-vpn-client/issues/809
• MISChttps://github.com/mozilla-mobile/mozilla-vpn-client/issues/810
• MISChttps://github.com/mozilla-mobile/mozilla-vpn-client/issues/812
• PATCHhttps://github.com/mozilla-mobile/mozilla-vpn-client/pull/816