CVE-2018-18356MEDIUM
Description
An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
References
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html
http://www.securityfocus.com/bid/106084
https://access.redhat.com/errata/RHSA-2018:3803
https://access.redhat.com/errata/RHSA-2019:0373
https://access.redhat.com/errata/RHSA-2019:0374
https://access.redhat.com/errata/RHSA-2019:1144
https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html
https://lists.debian.org/debian-lts-announce/2019/02/msg00023.html
https://lists.debian.org/debian-lts-announce/2019/02/msg00024.html
https://security.gentoo.org/glsa/201903-04
https://security.gentoo.org/glsa/201904-07
https://security.gentoo.org/glsa/201908-18
https://usn.ubuntu.com/3896-1/
https://usn.ubuntu.com/3897-1/
https://www.debian.org/security/2018/dsa-4352
Details
Source: MITRE
Published: 2018-12-11
Updated: 2020-08-24
Type: CWE-787
Risk Information
CVSS v2.0
Base Score: 6.8
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Impact Score: 6.4
Exploitability Score: 8.6
Severity: MEDIUM
CVSS v3.0
Base Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 2.8
Severity: HIGH
Vulnerable Software
Configuration 1
OR
Configuration 2
OR
Configuration 3
OR
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Configuration 4
OR
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Configuration 5
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 127967 | GLSA-201908-18 : Chromium, Google Chrome: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | medium |
| 127579 | Oracle Linux 8 : thunderbird (ELSA-2019-1144) | Nessus | Oracle Linux Local Security Checks | high |
| 127459 | NewStart CGSL MAIN 4.05 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0169) | Nessus | NewStart CGSL Local Security Checks | high |
| 127427 | NewStart CGSL MAIN 4.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0153) | Nessus | NewStart CGSL Local Security Checks | high |
| 127319 | NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0095) | Nessus | NewStart CGSL Local Security Checks | high |
| 127308 | NewStart CGSL MAIN 4.06 : firefox Multiple Vulnerabilities (NS-SA-2019-0090) | Nessus | NewStart CGSL Local Security Checks | high |
| 127257 | NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0062) | Nessus | NewStart CGSL Local Security Checks | high |
| 127245 | NewStart CGSL CORE 5.04 / MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2019-0056) | Nessus | NewStart CGSL Local Security Checks | medium |
| 124845 | RHEL 8 : thunderbird (RHSA-2019:1144) | Nessus | Red Hat Local Security Checks | high |
| 123817 | openSUSE Security Update : MozillaThunderbird (openSUSE-2019-1162) | Nessus | SuSE Local Security Checks | high |
| 123781 | SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2019:0871-1) | Nessus | SuSE Local Security Checks | high |
| 123747 | SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2019:0852-1) | Nessus | SuSE Local Security Checks | high |
| 123581 | GLSA-201904-07 : Mozilla Thunderbird and Firefox: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | high |
| 123562 | CentOS 7 : thunderbird (CESA-2019:0681) | Nessus | CentOS Local Security Checks | high |
| 123561 | CentOS 6 : thunderbird (CESA-2019:0680) | Nessus | CentOS Local Security Checks | high |
| 700486 | Mozilla Firefox < 65.0.1 Multiple Vulnerabilities | Nessus Network Monitor | Web Clients | medium |
| 123488 | RHEL 7 : thunderbird (RHSA-2019:0681) | Nessus | Red Hat Local Security Checks | high |
| 123487 | RHEL 6 : thunderbird (RHSA-2019:0680) | Nessus | Red Hat Local Security Checks | high |
| 123485 | Oracle Linux 7 : thunderbird (ELSA-2019-0681) | Nessus | Oracle Linux Local Security Checks | high |
| 123484 | Oracle Linux 6 : thunderbird (ELSA-2019-0680) | Nessus | Oracle Linux Local Security Checks | high |
| 123398 | openSUSE Security Update : Chromium (openSUSE-2019-977) | Nessus | SuSE Local Security Checks | medium |
| 122732 | GLSA-201903-04 : Mozilla Firefox: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | high |
| 122493 | openSUSE Security Update : MozillaThunderbird (openSUSE-2019-251) | Nessus | SuSE Local Security Checks | high |
| 122492 | openSUSE Security Update : MozillaFirefox (openSUSE-2019-248) | Nessus | SuSE Local Security Checks | medium |
| 122482 | Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 18.10 : Thunderbird vulnerabilities (USN-3897-1) | Nessus | Ubuntu Local Security Checks | high |
| 122470 | openSUSE Security Update : MozillaThunderbird (openSUSE-2019-250) | Nessus | SuSE Local Security Checks | medium |
| 122402 | Mozilla Thunderbird < 60.5.1 | Nessus | Windows | medium |
| 122401 | Mozilla Thunderbird < 60.5.1 | Nessus | MacOS X Local Security Checks | medium |
| 122390 | Scientific Linux Security Update : firefox on SL7.x x86_64 (20190221) | Nessus | Scientific Linux Local Security Checks | medium |
| 122389 | Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20190219) | Nessus | Scientific Linux Local Security Checks | medium |
| 122352 | CentOS 7 : firefox (CESA-2019:0374) | Nessus | CentOS Local Security Checks | medium |
| 122351 | CentOS 6 : firefox (CESA-2019:0373) | Nessus | CentOS Local Security Checks | medium |
| 122336 | RHEL 7 : firefox (RHSA-2019:0374) | Nessus | Red Hat Local Security Checks | medium |
| 122335 | RHEL 6 : firefox (RHSA-2019:0373) | Nessus | Red Hat Local Security Checks | medium |
| 122327 | Oracle Linux 7 : firefox (ELSA-2019-0374) | Nessus | Oracle Linux Local Security Checks | medium |
| 122326 | Oracle Linux 6 : firefox (ELSA-2019-0373) | Nessus | Oracle Linux Local Security Checks | medium |
| 122302 | openSUSE Security Update : MozillaFirefox (openSUSE-2019-202) | Nessus | SuSE Local Security Checks | medium |
| 122269 | Debian DSA-4392-1 : thunderbird - security update | Nessus | Debian Local Security Checks | high |
| 122268 | Debian DSA-4391-1 : firefox-esr - security update | Nessus | Debian Local Security Checks | medium |
| 122263 | Debian DLA-1678-1 : thunderbird security update | Nessus | Debian Local Security Checks | high |
| 122262 | Debian DLA-1677-1 : firefox-esr security update | Nessus | Debian Local Security Checks | medium |
| 122233 | Mozilla Firefox < 65.0.1 | Nessus | Windows | medium |
| 122232 | Mozilla Firefox < 65.0.1 | Nessus | MacOS X Local Security Checks | medium |
| 122194 | Mozilla Firefox ESR < 60.5.1 | Nessus | Windows | medium |
| 122193 | Mozilla Firefox ESR < 60.5.1 | Nessus | MacOS X Local Security Checks | medium |
| 122165 | FreeBSD : mozilla -- multiple vulnerabilities (18211552-f650-4d86-ba4f-e6d5cbfcdbeb) | Nessus | FreeBSD Local Security Checks | medium |
| 121194 | Fedora 28 : chromium (2019-348547a32d) | Nessus | Fedora Local Security Checks | medium |
| 120969 | FreeBSD : chromium -- multiple vulnerabilities (546d4dd4-10ea-11e9-b407-080027ef1a23) | Nessus | FreeBSD Local Security Checks | medium |
| 120966 | Fedora 29 : chromium (2019-859384e002) | Nessus | Fedora Local Security Checks | medium |
| 119714 | openSUSE Security Update : Chromium (openSUSE-2018-1557) | Nessus | SuSE Local Security Checks | medium |
| 119568 | RHEL 6 : chromium-browser (RHSA-2018:3803) | Nessus | Red Hat Local Security Checks | medium |
| 119558 | Google Chrome < 71.0.3578.80 Multiple Vulnerabilities | Nessus | Windows | medium |
| 119557 | Google Chrome < 71.0.3578.80 Multiple Vulnerabilities | Nessus | MacOS X Local Security Checks | medium |
| 119549 | openSUSE Security Update : Chromium (openSUSE-2018-1521) | Nessus | SuSE Local Security Checks | medium |
| 119509 | Debian DSA-4352-1 : chromium-browser - security update | Nessus | Debian Local Security Checks | medium |