CVE-2018-5183
Fixed in a distro release EPSS 3%
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.
Products: mozilla thunderbird_esr, mozilla thunderbird, mozilla firefox_esr
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | thunderbird | 52.8.0-1.amzn2 |
| Arch Linux | thunderbird | 52.8.0-1 |
| Debian 12 | firefox-esr | 52.8.0esr-1 |
| Debian 12 | thunderbird | 1:52.8.0-1 |
| Debian 13 | firefox-esr | 52.8.0esr-1 |
| Debian 13 | thunderbird | 1:52.8.0-1 |
| Debian 14 | firefox-esr | 52.8.0esr-1 |
| Debian 14 | thunderbird | 1:52.8.0-1 |
| Debian 7 | firefox-esr | 52.8.0esr-1~deb7u1 |
| Debian 7 | thunderbird | 1:52.8.0-1~deb7u1 |
| Debian 8 | firefox-esr | 52.8.0esr-1~deb8u1 |
| Debian 8 | thunderbird | 1:52.8.0-1~deb8u1 |
| Debian 9 | firefox-esr | 52.8.0esr-1~deb9u1 |
| Debian 9 | thunderbird | 1:52.8.0-1~deb9u1 |
| Red Hat Enterprise Linux 6 | firefox | 0:52.8.0-1.el6_9 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:52.8.0-1.el6_9 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:52.8.0-2.el6_9 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:52.8.0-2.el6_9 |
| Red Hat Enterprise Linux 7 | firefox | 0:52.8.0-1.el7_5 |
| Red Hat Enterprise Linux 7 | firefox-debuginfo | 0:52.8.0-1.el7_5 |
| Red Hat Enterprise Linux 7 | thunderbird | 0:52.8.0-1.el7_5 |
| Red Hat Enterprise Linux 7 | thunderbird-debuginfo | 0:52.8.0-1.el7_5 |
| SUSE Enterprise Storage 4 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Enterprise Storage 5 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE HPE Helion OpenStack 8 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Desktop 12 SP3 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Desktop 12 SP4 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | MozillaFirefox | 52.9.0esr-3.7.12 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | MozillaFirefox | 52.8.0esr-72.32.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | MozillaFirefox | 52.8.0esr-72.32.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | MozillaFirefox | 52.8.0esr-72.32.1 |
| SUSE Linux Enterprise Server 11 SP4 | MozillaFirefox | 52.8.0esr-72.32.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server 12 SP3 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12 SP4 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12 SP5 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server 12-LTSS | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | MozillaFirefox | 52.8.0esr-72.32.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | MozillaFirefox | 52.8.0esr-72.32.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE OpenStack Cloud 7 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE OpenStack Cloud 7 | MozillaFirefox | 52.8.0esr-109.31.2 |
| SUSE OpenStack Cloud 8 | MozillaFirefox | 68.2.0-109.95.2 |
| SUSE OpenStack Cloud Crowbar 8 | MozillaFirefox | 68.2.0-109.95.2 |
| Ubuntu 14.04 LTS | thunderbird | 1:52.8.0+build1-0ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | thunderbird | 1:52.8.0+build1-0ubuntu0.16.04.1 |
| Ubuntu 18.04 LTS | thunderbird | 1:52.8.0+build1-0ubuntu0.18.04.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 91.1.1-1.1 |