CVE-2018-5146 An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.
HighCVSS 8.8
EPSS 11.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firefox-esr(Debian:12) | < 52.7.2esr-1 | 52.7.2esr-1 |
| debian/firefox-esr(Debian:13) | < 52.7.2esr-1 | 52.7.2esr-1 |
| debian/firefox-esr(Debian:14) | < 52.7.2esr-1 | 52.7.2esr-1 |
| debian/libvorbis(Debian:12) | < 1.3.5-4.2 | 1.3.5-4.2 |
| debian/libvorbis(Debian:13) | < 1.3.5-4.2 | 1.3.5-4.2 |
| debian/libvorbis(Debian:14) | < 1.3.5-4.2 | 1.3.5-4.2 |
| debian/thunderbird(Debian:12) | < 1:52.7.0-1 | 1:52.7.0-1 |
| debian/thunderbird(Debian:13) | < 1:52.7.0-1 | 1:52.7.0-1 |
| debian/thunderbird(Debian:14) | < 1:52.7.0-1 | 1:52.7.0-1 |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.4 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
Show 28 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 17.10 | No fix listed |
| mozilla Firefox | < 52.7.2 | 52.7.2 |
| mozilla Firefox | < 59.0.1 | 59.0.1 |
| mozilla Thunderbird | < 52.7.0 | 52.7.0 |
| alpine/libvorbis(Alpine:v3.10) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.11) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.12) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.13) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.14) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.15) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.16) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.17) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.18) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.19) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.20) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.21) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.22) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.23) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.24) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.5) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.6) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.7) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.8) | < 1.3.6-r0 | 1.3.6-r0 |
| alpine/libvorbis(Alpine:v3.9) | < 1.3.6-r0 | 1.3.6-r0 |
| mozilla firefox esr | < 52.7.2 | 52.7.2 |
| mozilla Thunderbird | < 52.7 | 52.7 |
References
- Debian Security Tracker CVE-2018-5146 vendor-advisory
- 103432 third-party-advisory vdb-entry
- 1040544 third-party-advisory vdb-entry
- RHSA-2018:0549 third-party-advisory vendor-advisory
- RHSA-2018:0647 third-party-advisory vendor-advisory
- RHSA-2018:0648 third-party-advisory vendor-advisory
- RHSA-2018:0649 third-party-advisory vendor-advisory
- RHSA-2018:1058 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking permissions-required vendor-advisory
- [debian-lts-announce] 20180326 [SECURITY] [DLA 1319-1] firefox-esr security update mailing-list third-party-advisory
- [debian-lts-announce] 20180329 [SECURITY] [DLA 1327-1] thunderbird security update mailing-list third-party-advisory
- [debian-lts-announce] 20180430 [SECURITY] [DLA 1368-1] libvorbis security update mailing-list third-party-advisory
- GLSA-201811-13 third-party-advisory vendor-advisory
- USN-3545-1 third-party-advisory vendor-advisory
- USN-3599-1 third-party-advisory vendor-advisory
- USN-3604-1 third-party-advisory vendor-advisory
- DSA-4140 third-party-advisory vendor-advisory
- DSA-4143 third-party-advisory vendor-advisory
- DSA-4155 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking