kritisch
CVE-2018-5183
Mozilla: Backport critical security fixes in Skia
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Red Hat, Amazon. Niedriger laut Oracle (hoch), Ubuntu (mittel).
Beschreibung
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 2 | thunderbird, thunderbird-debuginfo | 52.8.0-1.amzn2 |
| debian 11 | firefox-esr, thunderbird | 52.8.0esr-1 und 1 weitere |
| debian 12 | firefox-esr, thunderbird | 52.8.0esr-1 und 1 weitere |
| debian 13 | firefox-esr, thunderbird | 52.8.0esr-1 und 1 weitere |
| debian 14 | firefox-esr, thunderbird | 52.8.0esr-1 und 1 weitere |
| debian 7 | firefox-esr, thunderbird | 52.8.0esr-1~deb7u1 und 1 weitere |
| debian 8 | firefox-esr, thunderbird | 52.8.0esr-1~deb8u1 und 1 weitere |
| debian 9 | firefox-esr, thunderbird | 52.8.0esr-1~deb9u1 und 1 weitere |
| echo | firefox-esr, thunderbird | 52.8.0esr-1 und 1 weitere |
| Oracle Linux 6 | firefox, thunderbird | 52.8.0-1.0.1.el6_9 und 1 weitere |
| Oracle Linux 7 | firefox, thunderbird | 52.8.0-1.0.1.el7_5 |
| ubuntu 14.04 | thunderbird | 1:52.8.0+build1-0ubuntu0.14.04.1 |
Alle 26 Einträge aus 15 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| amazon linux 2 | thunderbird | 52.8.0-1.amzn2 |
| amazon linux 2 | thunderbird-debuginfo | 52.8.0-1.amzn2 |
| debian 11 | firefox-esr | 52.8.0esr-1 |
| debian 11 | thunderbird | 1:52.8.0-1 |
| debian 12 | firefox-esr | 52.8.0esr-1 |
| debian 12 | thunderbird | 1:52.8.0-1 |
| debian 13 | firefox-esr | 52.8.0esr-1 |
| debian 13 | thunderbird | 1:52.8.0-1 |
| debian 14 | firefox-esr | 52.8.0esr-1 |
| debian 14 | thunderbird | 1:52.8.0-1 |
| debian 7 | firefox-esr | 52.8.0esr-1~deb7u1 |
| debian 7 | thunderbird | 1:52.8.0-1~deb7u1 |
| debian 8 | firefox-esr | 52.8.0esr-1~deb8u1 |
| debian 8 | thunderbird | 1:52.8.0-1~deb8u1 |
| debian 9 | firefox-esr | 52.8.0esr-1~deb9u1 |
| debian 9 | thunderbird | 1:52.8.0-1~deb9u1 |
| echo | firefox-esr | 52.8.0esr-1 |
| echo | thunderbird | 1:52.8.0-1 |
| Oracle Linux 6 | firefox | 52.8.0-1.0.1.el6_9 |
| Oracle Linux 6 | thunderbird | 52.8.0-2.0.1.el6_9 |
| Oracle Linux 7 | firefox | 52.8.0-1.0.1.el7_5 |
| Oracle Linux 7 | thunderbird | 52.8.0-1.0.1.el7_5 |
| ubuntu 14.04 | thunderbird | 1:52.8.0+build1-0ubuntu0.14.04.1 |
| ubuntu 16.04 | thunderbird | 1:52.8.0+build1-0ubuntu0.16.04.1 |
| ubuntu 17.10 | thunderbird | 1:52.8.0+build1-0ubuntu0.17.10.1 |
| ubuntu 18.04 | thunderbird | 1:52.8.0+build1-0ubuntu0.18.04.1 |
Referenzen
- http://www.securityfocus.com/bid/104138
- http://www.securitytracker.com/id/1040898
- https://access.redhat.com/errata/RHSA-2018:1414
- https://access.redhat.com/errata/RHSA-2018:1415
- https://access.redhat.com/errata/RHSA-2018:1725
- https://access.redhat.com/errata/RHSA-2018:1726
- https://access.redhat.com/security/cve/CVE-2018-5183
- https://bugzilla.mozilla.org/show_bug.cgi?id=1454692
Alle 24 Referenzen
- https://linux.oracle.com/cve/CVE-2018-5183.html
- https://linux.oracle.com/errata/ELSA-2018-1726.html
- https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html
- https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html
- https://nvd.nist.gov/vuln/detail/CVE-2018-5183
- https://security.gentoo.org/glsa/201810-01
- https://security.gentoo.org/glsa/201811-13
- https://ubuntu.com/security/notices/USN-3660-1
- https://usn.ubuntu.com/3660-1/
- https://www.cve.org/CVERecord?id=CVE-2018-5183
- https://www.debian.org/security/2018/dsa-4199
- https://www.debian.org/security/2018/dsa-4209
- https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/#CVE-2018-5183
- https://www.mozilla.org/en-US/security/advisories/mfsa2018-13/#CVE-2018-5150
- https://www.mozilla.org/security/advisories/mfsa2018-12/
- https://www.mozilla.org/security/advisories/mfsa2018-13/