crítica
CVE-2018-5183
Mozilla: Backport critical security fixes in Skia
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Red Hat, Amazon. Más baja según Oracle (alta), Ubuntu (media).
Descripción
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 2 | thunderbird, thunderbird-debuginfo | 52.8.0-1.amzn2 |
| debian 11 | firefox-esr, thunderbird | 52.8.0esr-1 y 1 más |
| debian 12 | firefox-esr, thunderbird | 52.8.0esr-1 y 1 más |
| debian 13 | firefox-esr, thunderbird | 52.8.0esr-1 y 1 más |
| debian 14 | firefox-esr, thunderbird | 52.8.0esr-1 y 1 más |
| debian 7 | firefox-esr, thunderbird | 52.8.0esr-1~deb7u1 y 1 más |
| debian 8 | firefox-esr, thunderbird | 52.8.0esr-1~deb8u1 y 1 más |
| debian 9 | firefox-esr, thunderbird | 52.8.0esr-1~deb9u1 y 1 más |
| echo | firefox-esr, thunderbird | 52.8.0esr-1 y 1 más |
| Oracle Linux 6 | firefox, thunderbird | 52.8.0-1.0.1.el6_9 y 1 más |
| Oracle Linux 7 | firefox, thunderbird | 52.8.0-1.0.1.el7_5 |
| ubuntu 14.04 | thunderbird | 1:52.8.0+build1-0ubuntu0.14.04.1 |
Mostrar las 26 entradas de 15 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 2 | thunderbird | 52.8.0-1.amzn2 |
| amazon linux 2 | thunderbird-debuginfo | 52.8.0-1.amzn2 |
| debian 11 | firefox-esr | 52.8.0esr-1 |
| debian 11 | thunderbird | 1:52.8.0-1 |
| debian 12 | firefox-esr | 52.8.0esr-1 |
| debian 12 | thunderbird | 1:52.8.0-1 |
| debian 13 | firefox-esr | 52.8.0esr-1 |
| debian 13 | thunderbird | 1:52.8.0-1 |
| debian 14 | firefox-esr | 52.8.0esr-1 |
| debian 14 | thunderbird | 1:52.8.0-1 |
| debian 7 | firefox-esr | 52.8.0esr-1~deb7u1 |
| debian 7 | thunderbird | 1:52.8.0-1~deb7u1 |
| debian 8 | firefox-esr | 52.8.0esr-1~deb8u1 |
| debian 8 | thunderbird | 1:52.8.0-1~deb8u1 |
| debian 9 | firefox-esr | 52.8.0esr-1~deb9u1 |
| debian 9 | thunderbird | 1:52.8.0-1~deb9u1 |
| echo | firefox-esr | 52.8.0esr-1 |
| echo | thunderbird | 1:52.8.0-1 |
| Oracle Linux 6 | firefox | 52.8.0-1.0.1.el6_9 |
| Oracle Linux 6 | thunderbird | 52.8.0-2.0.1.el6_9 |
| Oracle Linux 7 | firefox | 52.8.0-1.0.1.el7_5 |
| Oracle Linux 7 | thunderbird | 52.8.0-1.0.1.el7_5 |
| ubuntu 14.04 | thunderbird | 1:52.8.0+build1-0ubuntu0.14.04.1 |
| ubuntu 16.04 | thunderbird | 1:52.8.0+build1-0ubuntu0.16.04.1 |
| ubuntu 17.10 | thunderbird | 1:52.8.0+build1-0ubuntu0.17.10.1 |
| ubuntu 18.04 | thunderbird | 1:52.8.0+build1-0ubuntu0.18.04.1 |
Referencias
- http://www.securityfocus.com/bid/104138
- http://www.securitytracker.com/id/1040898
- https://access.redhat.com/errata/RHSA-2018:1414
- https://access.redhat.com/errata/RHSA-2018:1415
- https://access.redhat.com/errata/RHSA-2018:1725
- https://access.redhat.com/errata/RHSA-2018:1726
- https://access.redhat.com/security/cve/CVE-2018-5183
- https://bugzilla.mozilla.org/show_bug.cgi?id=1454692
Las 24 referencias
- https://linux.oracle.com/cve/CVE-2018-5183.html
- https://linux.oracle.com/errata/ELSA-2018-1726.html
- https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html
- https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html
- https://nvd.nist.gov/vuln/detail/CVE-2018-5183
- https://security.gentoo.org/glsa/201810-01
- https://security.gentoo.org/glsa/201811-13
- https://ubuntu.com/security/notices/USN-3660-1
- https://usn.ubuntu.com/3660-1/
- https://www.cve.org/CVERecord?id=CVE-2018-5183
- https://www.debian.org/security/2018/dsa-4199
- https://www.debian.org/security/2018/dsa-4209
- https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/#CVE-2018-5183
- https://www.mozilla.org/en-US/security/advisories/mfsa2018-13/#CVE-2018-5150
- https://www.mozilla.org/security/advisories/mfsa2018-12/
- https://www.mozilla.org/security/advisories/mfsa2018-13/