CVE-2021-36773 log

Source
Severity Medium
Remote Yes
Type Denial of service
Description
uBlock Origin before 1.36.2 supports an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service (unbounded recursion that can trigger memory consumption and a loss of all blocking functionality).
Group Package Affected Fixed Severity Status Ticket
AVG-2172 firefox-ublock-origin 1.36.0-1 1.36.2-1 Medium Fixed
Date Advisory Group Package Severity Type
20 Jul 2021 ASA-202107-38 AVG-2172 firefox-ublock-origin Medium denial of service
References
https://github.com/vtriolet/writings/blob/main/posts/2021/ublock_origin_and_umatrix_denial_of_service.adoc
https://github.com/uBlockOrigin/uBlock-issues/issues/1649
https://github.com/gorhill/uBlock/commit/365b20e8cc27cd776ef3868b02ea739ba387356d