CVE-2018-18504 in Ubuntu

CVE-2018-18504

Priority

Description

A crash and out-of-bounds read can occur when the buffer of a texture
client is freed while it is still in use during graphic operations. This
results is a potentially exploitable crash and the possibility of reading
from the memory of the freed buffers. This vulnerability affects Firefox <
65.

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18504
https://www.mozilla.org/en-US/security/advisories/mfsa2019-01/#CVE-2018-18504
https://usn.ubuntu.com/usn/usn-3874-1

Notes

tyhicks> mozjs contains a copy of the SpiderMonkey JavaScript engine

Assigned-to

chrisccoulson

Package

Source: firefox (LP Ubuntu Debian)

Upstream:	released (65.0)
Ubuntu 12.04 ESM (Precise Pangolin):	DNE
Ubuntu 14.04 LTS (Trusty Tahr):	released (65.0+build2-0ubuntu0.14.04.1)
Ubuntu 16.04 LTS (Xenial Xerus):	released (65.0+build2-0ubuntu0.16.04.1)
Ubuntu 18.04 LTS (Bionic Beaver):	released (65.0+build2-0ubuntu0.18.04.1)
Ubuntu 18.10 (Cosmic Cuttlefish):	released (65.0+build2-0ubuntu0.18.10.1)
Ubuntu 19.04 (Disco Dingo):	released (65.0+build2-0ubuntu1)

Package

Source: mozjs38 (LP Ubuntu Debian)

Upstream:	needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):	DNE
Ubuntu 14.04 LTS (Trusty Tahr):	DNE
Ubuntu 16.04 LTS (Xenial Xerus):	DNE
Ubuntu 18.04 LTS (Bionic Beaver):	needs-triage
Ubuntu 18.10 (Cosmic Cuttlefish):	DNE
Ubuntu 19.04 (Disco Dingo):	DNE

Package

Source: mozjs52 (LP Ubuntu Debian)

Upstream:	needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):	DNE
Ubuntu 14.04 LTS (Trusty Tahr):	DNE
Ubuntu 16.04 LTS (Xenial Xerus):	DNE
Ubuntu 18.04 LTS (Bionic Beaver):	needs-triage
Ubuntu 18.10 (Cosmic Cuttlefish):	needs-triage
Ubuntu 19.04 (Disco Dingo):	needs-triage

Package

Source: mozjs60 (LP Ubuntu Debian)

Upstream:	needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):	DNE
Ubuntu 14.04 LTS (Trusty Tahr):	DNE
Ubuntu 16.04 LTS (Xenial Xerus):	DNE
Ubuntu 18.04 LTS (Bionic Beaver):	DNE
Ubuntu 18.10 (Cosmic Cuttlefish):	needs-triage
Ubuntu 19.04 (Disco Dingo):	needs-triage

Package

Source: thunderbird (LP Ubuntu Debian)

Priority: Low

Upstream:	needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):	DNE
Ubuntu 14.04 LTS (Trusty Tahr):	needs-triage
Ubuntu 16.04 LTS (Xenial Xerus):	needs-triage
Ubuntu 18.04 LTS (Bionic Beaver):	needs-triage
Ubuntu 18.10 (Cosmic Cuttlefish):	needs-triage
Ubuntu 19.04 (Disco Dingo):	needs-triage

More Information

Updated: 2019-02-06 23:14:25 UTC (commit c77dea2cc51b46a144a389f17f3ab3ae4dfd6f7c)