Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2018-5146HistoryJun 11, 2018 - 9:29 p.m.
CVE-2018-5146
2018-06-1121:29:00
Debian Security Bug Tracker
security-tracker.debian.org
32
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.38 Low
EPSS
Percentile
97.2%
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 59.0.1-1 | firefox_59.0.1-1_all.deb |
| Debian | 12 | all | firefox-esr | < 52.7.2esr-1 | firefox-esr_52.7.2esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 52.7.2esr-1 | firefox-esr_52.7.2esr-1_all.deb |
| Debian | 10 | all | firefox-esr | < 52.7.2esr-1 | firefox-esr_52.7.2esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 52.7.2esr-1 | firefox-esr_52.7.2esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 52.7.2esr-1 | firefox-esr_52.7.2esr-1_all.deb |
| Debian | 12 | all | libvorbis | < 1.3.5-4.2 | libvorbis_1.3.5-4.2_all.deb |
| Debian | 11 | all | libvorbis | < 1.3.5-4.2 | libvorbis_1.3.5-4.2_all.deb |
| Debian | 10 | all | libvorbis | < 1.3.5-4.2 | libvorbis_1.3.5-4.2_all.deb |
| Debian | 999 | all | libvorbis | < 1.3.5-4.2 | libvorbis_1.3.5-4.2_all.deb |
Related
android
android
CVE-2018-5146
2018-06-01 00:00:00
oraclelinux
oraclelinux
firefox security update
2018-03-19 00:00:00
libvorbis security update
2018-04-17 00:00:00
libvorbis security update
2018-04-05 00:00:00
nessus
nessus
SUSE SLES11 Security Update : libvorbis (SUSE-SU-2018:0783-1)
2018-03-27 00:00:00
Scientific Linux Security Update : libvorbis on SL7.x x86_64 (20180410)
2018-05-01 00:00:00
Fedora 26 : 1:libvorbis (2018-f26d891469)
2018-03-28 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2018-1155)
2020-01-23 00:00:00
Mozilla Firefox ESR Security Advisories (MFSA2018-08, MFSA2018-08) - Windows
2018-03-22 00:00:00
Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2018-1105)
2020-01-23 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: libvorbis-1.3.6-1.fc26
2018-03-27 19:31:39
[SECURITY] Fedora 28 Update: libvorbis-1.3.6-1.fc28
2018-03-30 13:35:33
[SECURITY] Fedora 27 Update: libvorbis-1.3.6-1.fc27
2018-03-20 18:26:53
osv
osv
CVE-2018-5146
2018-06-11 21:29:00
libvorbis - security update
2018-03-16 00:00:00
firefox-esr - security update
2018-03-27 00:00:00
mageia
mageia
Updated libvorbis packages fix security vulnerability
2018-03-19 15:13:14
Updated thunderbird packages fix security vulnerability
2018-04-15 16:33:47
Updated thunderbird packages fix bugs and security vulnerabilities
2018-04-20 20:24:13
cve
cve
alpinelinux
alpinelinux
CVE-2018-5146
2018-06-11 21:29:00
ubuntu
ubuntu
Firefox vulnerability
2018-03-16 00:00:00
libvorbis vulnerability
2018-03-22 00:00:00
Thunderbird vulnerabilities
2018-03-29 00:00:00
redhat
redhat
(RHSA-2018:0649) Important: libvorbis security update
2018-04-05 19:03:13
(RHSA-2018:1058) Important: libvorbis security update
2018-04-10 08:05:03
(RHSA-2018:0549) Critical: firefox security update
2018-03-19 03:31:41
centos
centos
libvorbis security update
2018-05-30 18:24:08
libvorbis security update
2018-04-09 23:35:22
firefox security update
2018-03-20 16:39:22
prion
prion
Design/Logic Flaw
2018-06-11 21:29:00
Code injection
2018-06-11 21:29:00
Design/Logic Flaw
2020-12-26 04:15:00
ibm
ibm
ubuntucve
ubuntucve
CVE-2018-5146
2018-03-16 00:00:00
CVE-2018-5147
2018-06-11 00:00:00
debian
debian
[SECURITY] [DSA 4140-1] libvorbis security update
2018-03-16 19:54:42
[SECURITY] [DSA 4140-1] libvorbis security update
2018-03-16 19:50:51
[SECURITY] [DSA 4143-1] firefox-esr security update
2018-03-17 18:23:06
veracode
veracode
Denial Of Service (DoS) Through Out-of-Bounds Write
2019-01-15 09:22:28
Denial Of Service (DoS) Through Out-of-Bounds Write
2018-04-25 09:40:14
checkpoint_advisories
checkpoint_advisories
redhatcve
redhatcve
CVE-2018-5146
2018-03-16 17:48:59
zdi
zdi
cloudfoundry
cloudfoundry
USN-3604-1: libvorbis vulnerability | Cloud Foundry
2018-05-02 00:00:00
amazon
amazon
Critical: libvorbis
2018-03-22 22:02:00
Critical: libvorbis
2018-04-05 15:57:00
archlinux
archlinux
[ASA-201803-13] firefox: arbitrary code execution
2018-03-18 00:00:00
[ASA-201803-21] lib32-libvorbis: multiple issues
2018-03-19 00:00:00
[ASA-201803-12] libvorbis: multiple issues
2018-03-16 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2018-03-18 15:11:21
debiancve
debiancve
CVE-2018-5147
2018-06-11 21:29:00
kaspersky
kaspersky
KLA11594 SB vulnerabilities in Mozilla Firefox
2018-03-16 00:00:00
KLA11595 SB vulnerabilities in Mozilla Firefox ESR
2018-03-16 00:00:00
KLA11229 Multiple vulnerabilities in Mozilla Thunderbird
2018-03-23 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2018-03-16 00:00:00
mozilla
mozilla
Out of bounds memory write while processing Vorbis audio data — Mozilla
2018-03-16 00:00:00
Security vulnerabilities fixed in Thunderbird 52.7 — Mozilla
2018-03-23 00:00:00
slackware
slackware
[slackware-security] libvorbis
2018-03-18 04:31:27
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 52.7.0-alt1
2018-03-24 00:00:00
threatpost
threatpost
Google Patches 11 Critical Android Bugs in June Update
2018-06-05 17:30:40
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2018-11-24 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.38 Low
EPSS
Percentile
97.2%
Related for DEBIANCVE:CVE-2018-5146