CVE-2018-5155
Fixed in a distro release EPSS 3%
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.
Products: mozilla thunderbird, mozilla thunderbird_esr, mozilla firefox, mozilla firefox_esr
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | thunderbird | 52.8.0-1.amzn2 |
| Arch Linux | firefox | 60.0-1 |
| Arch Linux | thunderbird | 52.8.0-1 |
| Debian 12 | firefox-esr | 52.8.0esr-1 |
| Debian 12 | thunderbird | 1:52.8.0-1 |
| Debian 13 | firefox-esr | 52.8.0esr-1 |
| Debian 13 | thunderbird | 1:52.8.0-1 |
| Debian 14 | firefox-esr | 52.8.0esr-1 |
| Debian 14 | thunderbird | 1:52.8.0-1 |
| Debian 7 | firefox-esr | 52.8.0esr-1~deb7u1 |
| Debian 7 | thunderbird | 1:52.8.0-1~deb7u1 |
| Debian 8 | firefox-esr | 52.8.0esr-1~deb8u1 |
| Debian 8 | thunderbird | 1:52.8.0-1~deb8u1 |
| Debian 9 | firefox-esr | 52.8.0esr-1~deb9u1 |
| Debian 9 | thunderbird | 1:52.8.0-1~deb9u1 |
| Red Hat Enterprise Linux 6 | firefox | 0:52.8.0-1.el6_9 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:52.8.0-1.el6_9 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:52.8.0-2.el6_9 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:52.8.0-2.el6_9 |
| Red Hat Enterprise Linux 7 | firefox | 0:52.8.0-1.el7_5 |
| Red Hat Enterprise Linux 7 | firefox-debuginfo | 0:52.8.0-1.el7_5 |
| Red Hat Enterprise Linux 7 | thunderbird | 0:52.8.0-1.el7_5 |
| Red Hat Enterprise Linux 7 | thunderbird-debuginfo | 0:52.8.0-1.el7_5 |
| SUSE Enterprise Storage 4 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Enterprise Storage 5 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE HPE Helion OpenStack 8 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Desktop 12 SP3 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Desktop 12 SP4 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | MozillaFirefox | 52.9.0esr-3.7.12 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | MozillaFirefox | 52.8.0esr-72.32.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | MozillaFirefox | 52.8.0esr-72.32.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | MozillaFirefox | 52.8.0esr-72.32.1 |
| SUSE Linux Enterprise Server 11 SP4 | MozillaFirefox | 52.8.0esr-72.32.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12 SP3 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12 SP4 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12 SP5 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12-LTSS | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | MozillaFirefox | 52.8.0esr-72.32.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | MozillaFirefox | 52.8.0esr-72.32.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE OpenStack Cloud 7 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE OpenStack Cloud 7 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE OpenStack Cloud 8 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE OpenStack Cloud Crowbar 8 | MozillaFirefox | 68.2.0-109.95.2 |
| Ubuntu 14.04 LTS | firefox | 60.0+build2-0ubuntu0.14.04.1 |
| Ubuntu 14.04 LTS | thunderbird | 1:52.8.0+build1-0ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | firefox | 60.0+build2-0ubuntu0.16.04.1 |
| Ubuntu 16.04 LTS | thunderbird | 1:52.8.0+build1-0ubuntu0.16.04.1 |
| Ubuntu 18.04 LTS | firefox | 60.0+build2-0ubuntu1 |
| Ubuntu 18.04 LTS | thunderbird | 1:52.8.0+build1-0ubuntu0.18.04.1 |
| openSUSE Tumbleweed | MozillaFirefox | 92.0-1.2 |
| openSUSE Tumbleweed | MozillaThunderbird | 91.1.1-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |