Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-5145

Опубликовано: 11 июн. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.5
CVSS3: 9.8

Описание

Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.

РелизСтатусПримечание
artful

not-affected

bionic

not-affected

cosmic

not-affected

devel

not-affected

disco

not-affected

eoan

not-affected

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected]
esm-infra/focal

DNE

focal

not-affected

groovy

not-affected

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needs-triage
cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-apps/bionic

ignored

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was deferred
cosmic

ignored

end of life
devel

DNE

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/focal

ignored

upstream wontfix
esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

upstream wontfix
focal

ignored

end of standard support, was deferred

Показывать по

РелизСтатусПримечание
artful

released

1:52.7.0+build1-0ubuntu0.17.10.1
bionic

released

1:52.7.0+build1-0ubuntu1
cosmic

released

1:52.7.0+build1-0ubuntu1
devel

released

1:52.7.0+build1-0ubuntu1
disco

released

1:52.7.0+build1-0ubuntu1
eoan

released

1:52.7.0+build1-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1:52.7.0+build1-0ubuntu0.14.04.1]]
esm-infra/focal

DNE

focal

released

1:52.7.0+build1-0ubuntu1
groovy

released

1:52.7.0+build1-0ubuntu1

Показывать по

EPSS

Процентиль: 88%
0.03792
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
redhat
больше 7 лет назад

Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.

CVSS3: 9.8
nvd
около 7 лет назад

Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.

CVSS3: 9.8
debian
около 7 лет назад

Memory safety bugs were reported in Firefox ESR 52.6. These bugs showe ...

CVSS3: 9.8
github
около 3 лет назад

Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.

CVSS3: 9.8
fstec
больше 7 лет назад

Уязвимость браузера Mozilla Firefox ESR и почтового клиента Thunderbird, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 88%
0.03792
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Уязвимость CVE-2018-5145