kritik
CVE-2018-5147
The libtremor library has the same flaw as CVE-2018-5146. This library ...
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on Android and ARM platforms. This vulnerability affects Firefox ESR < 52.7.2 and Firefox < 59.0.1.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | firefox-esr, libvorbisidec | 52.7.2esr-1 ve 1 tane daha |
| debian 12 | firefox-esr, libvorbisidec | 52.7.2esr-1 ve 1 tane daha |
| debian 13 | firefox-esr, libvorbisidec | 52.7.2esr-1 ve 1 tane daha |
| debian 14 | firefox-esr, libvorbisidec | 52.7.2esr-1 ve 1 tane daha |
| debian 7 | firefox-esr, libvorbisidec | 52.7.2esr-1~deb7u1 ve 1 tane daha |
| debian 8 | firefox-esr, libvorbisidec | 52.7.2esr-1~deb8u1 ve 1 tane daha |
| debian 9 | firefox-esr, libvorbisidec | 52.7.2esr-1~deb9u1 ve 1 tane daha |
| echo | firefox-esr, libvorbisidec | 52.7.2esr-1 ve 1 tane daha |
| ubuntu 14.04 | libvorbisidec | 1.0.2+svn18153-0.2+deb7u1build0.14.04.1 |
| ubuntu 14.04-ESM | libvorbisidec | 1.0.2+svn18153-0.2+deb7u1build0.14.04.1 |
| ubuntu 16.04 | firefox, libvorbisidec | 59.0.1+build1-0ubuntu0.16.04.1 ve 1 tane daha |
| ubuntu 16.04-ESM | libvorbisidec | 1.0.2+svn18153-0.2+deb7u1build0.16.04.1 |
16 kaynaktaki 25 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | firefox-esr | 52.7.2esr-1 |
| debian 11 | libvorbisidec | 1.2.1+git20180316-1 |
| debian 12 | firefox-esr | 52.7.2esr-1 |
| debian 12 | libvorbisidec | 1.2.1+git20180316-1 |
| debian 13 | firefox-esr | 52.7.2esr-1 |
| debian 13 | libvorbisidec | 1.2.1+git20180316-1 |
| debian 14 | firefox-esr | 52.7.2esr-1 |
| debian 14 | libvorbisidec | 1.2.1+git20180316-1 |
| debian 7 | firefox-esr | 52.7.2esr-1~deb7u1 |
| debian 7 | libvorbisidec | 1.0.2+svn18153-0.2+deb7u1 |
| debian 8 | firefox-esr | 52.7.2esr-1~deb8u1 |
| debian 8 | libvorbisidec | 1.0.2+svn18153-1~deb8u2 |
| debian 9 | firefox-esr | 52.7.2esr-1~deb9u1 |
| debian 9 | libvorbisidec | 1.0.2+svn18153-1+deb9u1 |
| echo | firefox-esr | 52.7.2esr-1 |
| echo | libvorbisidec | 1.2.1+git20180316-1 |
| ubuntu 14.04 | libvorbisidec | 1.0.2+svn18153-0.2+deb7u1build0.14.04.1 |
| ubuntu 14.04-ESM | libvorbisidec | 1.0.2+svn18153-0.2+deb7u1build0.14.04.1 |
| ubuntu 16.04 | firefox | 59.0.1+build1-0ubuntu0.16.04.1 |
| ubuntu 16.04 | libvorbisidec | 1.0.2+svn18153-0.2+deb7u1build0.16.04.1 |
| ubuntu 16.04-ESM | libvorbisidec | 1.0.2+svn18153-0.2+deb7u1build0.16.04.1 |
| ubuntu 17.10 | libvorbisidec | 1.0.2+svn18153-1+deb9u1build0.17.10.1 |
| ubuntu 18.04 | firefox | 59.0.1+build1-0ubuntu1 |
| ubuntu 18.10 | firefox | 59.0.1+build1-0ubuntu1 |
| ubuntu 19.04 | firefox | 59.0.1+build1-0ubuntu1 |
Referanslar
- http://www.securityfocus.com/bid/103432
- http://www.securitytracker.com/id/1040544
- https://bugzilla.mozilla.org/show_bug.cgi?id=1446365
- https://git.xiph.org/?p=tremor.git;a=commit;h=562307a4a7082e24553f3d2c55dab397a17c4b4f
- https://lists.debian.org/debian-lts-announce/2018/03/msg00016.html
- https://lists.debian.org/debian-lts-announce/2018/03/msg00022.html
- https://www.cve.org/CVERecord?id=CVE-2018-5147
- https://www.debian.org/security/2018/dsa-4141