Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-5089

Опубликовано: 11 июн. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.5
CVSS3: 9.8

Описание

Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.

РелизСтатусПримечание
artful

released

58.0+build6-0ubuntu0.17.10.1
bionic

released

59.0.1+build1-0ubuntu1
cosmic

released

59.0.1+build1-0ubuntu1
devel

released

59.0.1+build1-0ubuntu1
disco

released

59.0.1+build1-0ubuntu1
eoan

released

59.0.1+build1-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [58.0+build6-0ubuntu0.14.04.1]]
esm-infra/focal

DNE

focal

released

59.0.1+build1-0ubuntu1
groovy

released

59.0.1+build1-0ubuntu1

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needs-triage
cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-apps/bionic

ignored

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

Показывать по

РелизСтатусПримечание
artful

released

52.8.1-0ubuntu0.17.10.1
bionic

released

52.8.1-0ubuntu0.18.04.1
cosmic

ignored

end of life
devel

DNE

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/focal

ignored

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

52.8.1-0ubuntu0.18.04.1
focal

ignored

Показывать по

РелизСтатусПримечание
artful

released

1:52.6.0+build1-0ubuntu0.17.10.1
bionic

released

1:52.6.0+build1-0ubuntu1
cosmic

released

1:52.6.0+build1-0ubuntu1
devel

released

1:52.6.0+build1-0ubuntu1
disco

released

1:52.6.0+build1-0ubuntu1
eoan

released

1:52.6.0+build1-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1:52.6.0+build1-0ubuntu0.14.04.1]]
esm-infra/focal

DNE

focal

released

1:52.6.0+build1-0ubuntu1
groovy

released

1:52.6.0+build1-0ubuntu1

Показывать по

EPSS

Процентиль: 85%
0.02663
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
redhat
больше 7 лет назад

Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.

CVSS3: 9.8
nvd
около 7 лет назад

Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.

CVSS3: 9.8
debian
около 7 лет назад

Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. S ...

CVSS3: 9.8
github
около 3 лет назад

Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.

CVSS3: 9.8
fstec
больше 7 лет назад

Уязвимость браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, связанная c выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 85%
0.02663
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Уязвимость CVE-2018-5089