Логотип exploitDog
bind:"GHSA-5g4g-56fq-mvwf" OR bind:"CVE-2018-18505"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-5g4g-56fq-mvwf" OR bind:"CVE-2018-18505"

Количество 19

Количество 19

github логотип

GHSA-5g4g-56fq-mvwf

больше 3 лет назад

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

CVSS3: 10
EPSS: Низкий
ubuntu логотип

CVE-2018-18505

почти 7 лет назад

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

CVSS3: 10
EPSS: Низкий
redhat логотип

CVE-2018-18505

почти 7 лет назад

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

CVSS3: 10
EPSS: Низкий
nvd логотип

CVE-2018-18505

почти 7 лет назад

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

CVSS3: 10
EPSS: Низкий
debian логотип

CVE-2018-18505

почти 7 лет назад

An earlier fix for an Inter-process Communication (IPC) vulnerability, ...

CVSS3: 10
EPSS: Низкий
fstec логотип

BDU:2019-00819

почти 7 лет назад

Уязвимость веб-браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с ошибками реализации механизма аутентификации межпроцессного взаимодействия (IPC), позволяющая нарушителю повысить свои привилегии и выйти из изолированной программной среды

CVSS3: 8.3
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:0133-1

почти 7 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:0132-1

больше 6 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:0336-2

больше 6 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:0336-1

почти 7 лет назад

Security update for MozillaFirefox

EPSS: Низкий
oracle-oval логотип

ELSA-2019-0219

почти 7 лет назад

ELSA-2019-0219: firefox security update (CRITICAL)

EPSS: Низкий
oracle-oval логотип

ELSA-2019-0218

почти 7 лет назад

ELSA-2019-0218: firefox security update (CRITICAL)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:1758-1

больше 6 лет назад

Security update for MozillaFirefox

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:0273-1

почти 7 лет назад

Security update for MozillaFirefox

EPSS: Низкий
oracle-oval логотип

ELSA-2019-0270

почти 7 лет назад

ELSA-2019-0270: thunderbird security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2019-0269

почти 7 лет назад

ELSA-2019-0269: thunderbird security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:0182-1

почти 7 лет назад

Security update for MozillaThunderbird

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:0338-1

почти 7 лет назад

Security update for MozillaThunderbird

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:0251-1

больше 6 лет назад

Security update for MozillaThunderbird

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-5g4g-56fq-mvwf

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

CVSS3: 10
3%
Низкий
больше 3 лет назад
ubuntu логотип
CVE-2018-18505

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

CVSS3: 10
3%
Низкий
почти 7 лет назад
redhat логотип
CVE-2018-18505

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

CVSS3: 10
3%
Низкий
почти 7 лет назад
nvd логотип
CVE-2018-18505

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

CVSS3: 10
3%
Низкий
почти 7 лет назад
debian логотип
CVE-2018-18505

An earlier fix for an Inter-process Communication (IPC) vulnerability, ...

CVSS3: 10
3%
Низкий
почти 7 лет назад
fstec логотип
BDU:2019-00819

Уязвимость веб-браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с ошибками реализации механизма аутентификации межпроцессного взаимодействия (IPC), позволяющая нарушителю повысить свои привилегии и выйти из изолированной программной среды

CVSS3: 8.3
3%
Низкий
почти 7 лет назад
suse-cvrf логотип
openSUSE-SU-2019:0133-1

Security update for MozillaFirefox

почти 7 лет назад
suse-cvrf логотип
openSUSE-SU-2019:0132-1

Security update for MozillaFirefox

больше 6 лет назад
suse-cvrf логотип
SUSE-SU-2019:0336-2

Security update for MozillaFirefox

больше 6 лет назад
suse-cvrf логотип
SUSE-SU-2019:0336-1

Security update for MozillaFirefox

почти 7 лет назад
oracle-oval логотип
ELSA-2019-0219

ELSA-2019-0219: firefox security update (CRITICAL)

почти 7 лет назад
oracle-oval логотип
ELSA-2019-0218

ELSA-2019-0218: firefox security update (CRITICAL)

почти 7 лет назад
suse-cvrf логотип
openSUSE-SU-2019:1758-1

Security update for MozillaFirefox

больше 6 лет назад
suse-cvrf логотип
SUSE-SU-2019:0273-1

Security update for MozillaFirefox

почти 7 лет назад
oracle-oval логотип
ELSA-2019-0270

ELSA-2019-0270: thunderbird security update (IMPORTANT)

почти 7 лет назад
oracle-oval логотип
ELSA-2019-0269

ELSA-2019-0269: thunderbird security update (IMPORTANT)

почти 7 лет назад
suse-cvrf логотип
openSUSE-SU-2019:0182-1

Security update for MozillaThunderbird

почти 7 лет назад
suse-cvrf логотип
SUSE-SU-2019:0338-1

Security update for MozillaThunderbird

почти 7 лет назад
suse-cvrf логотип
openSUSE-SU-2019:0251-1

Security update for MozillaThunderbird

больше 6 лет назад

Уязвимостей на страницу