CVE-2016-2818: canonical ubuntu_linux

Modified

AliasesRHSA-2016:1392UBUNTU-CVE-2016-2818DEBIAN-CVE-2016-2818+2 more

Published 13-06-2016Last modified 05-08-2024

Vulnerability summary

CVE-2016-2818 is a high (CVSS 8.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 3.87% chance of exploitation in the next 30 days, higher than 90.2% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 8.8, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

8.8/10

010

High · v3.0 (NVD)

EPSS score

3.87%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 14 · Related 9

DLA-521-1 DSA-3600-1 MGASA-2016-0220 MGASA-2016-0254 OPENSUSE-SU-2016:1769-1 OPENSUSE-SU-2016:1778-1+8 more

Timeline

13-06-2016
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS metrics

4 scores · 3 sources · 2 versions

v3.08.8v2.06.8

EPSS trend

Probability

3.87%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.87% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat14 products

enterprise_linux_desktop5.0 | 6.0 | 7.0
enterprise_linux_for_ibm_z_systems5.0 | 6.0 | 7.0
enterprise_linux_for_ibm_z_systems_eus7.2
enterprise_linux_for_power_big_endian5.0 | 6.0 | 7.0
enterprise_linux_for_power_big_endian_eus7.2

Show all 14

Novell4 products

suse_linux_enterprise_desktop12.0 | 12.0:sp1
suse_linux_enterprise_serverEOL12.0 | 12.0:sp1
suse_linux_enterprise_software_development_kit12.0 | 12.0:sp1
suse_package_hub_for_suse_linux_enterprise12

Debian3 products

firefox-esr< 45.2.0esr-1
icedove< 1:45.2.0-1~deb8u1 | < 1:45.2.0-2~deb7u1
debian_linuxEOL8.0

Opensuse2 products

leapEOL42.1
opensuseEOL13.1 | 13.2

Ubuntu2 products

firefox< 47.0+build3-0ubuntu0.14.04.1 | < 47.0+build3-0ubuntu0.16.04.1
thunderbird< 1:45.2.0+build1-0ubuntu0.14.04.3 | < 1:45.2.0+build1-0ubuntu0.16.04.1

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04 | 15.10 | 16.04

Mozilla1 product

firefox45.1.0 | 45.1.1 | ≤ 46.0.1

7 vendors · 27 products

References

43 links

www.securitytracker.com/id/1036057VDB EntryX Refsource SECTRACKThird Party Advisory
www.debian.org/security/2016/dsa-3647Vendor AdvisoryX Refsource DEBIAN
bugzilla.mozilla.org/show_bug.cgi?id=1234147X Refsource CONFIRMIssue TrackingPermissions Required
bugzilla.mozilla.org/show_bug.cgi?id=1265577X Refsource CONFIRMIssue TrackingPermissions Required
access.redhat.com/errata/RHSA-2016:1217Vendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=1256739X Refsource CONFIRMIssue TrackingPermissions Required
bugzilla.mozilla.org/show_bug.cgi?id=1261752X Refsource CONFIRMIssue TrackingPermissions Required
bugzilla.mozilla.org/show_bug.cgi?id=1269729X Refsource CONFIRMIssue TrackingPermissions Required
www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlX Refsource CONFIRM

Show all 43 references

bugzilla.mozilla.org/show_bug.cgi?id=1256968X Refsource CONFIRMIssue TrackingPermissions Required
www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlX Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=1264575X Refsource CONFIRMIssue TrackingPermissions Required
bugzilla.mozilla.org/show_bug.cgi?id=1267130X Refsource CONFIRMIssue TrackingPermissions Required
access.redhat.com/errata/RHSA-2016:1392Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.mozilla.org/security/announce/2016/mfsa2016-49.htmlX Refsource CONFIRMVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=1261230X Refsource CONFIRMIssue TrackingPermissions Required
bugzilla.mozilla.org/show_bug.cgi?id=1273202X Refsource CONFIRMIssue TrackingPermissions Required
lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=1256493X Refsource CONFIRMIssue TrackingPermissions Required
bugzilla.mozilla.org/show_bug.cgi?id=1263384X Refsource CONFIRMIssue TrackingPermissions Required
lists.opensuse.org/opensuse-security-announce/2016-06/msg00014.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
www.ubuntu.com/usn/USN-3023-1Vendor AdvisoryX Refsource UBUNTU
bugzilla.mozilla.org/show_bug.cgi?id=1273701X Refsource CONFIRMIssue TrackingPermissions Required
www.ubuntu.com/usn/USN-2993-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00055.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
www.securityfocus.com/bid/91075VDB EntryX Refsource BID
www.debian.org/security/2016/dsa-3600Vendor AdvisoryX Refsource DEBIANThird Party Advisory
access.redhat.com/security/updates/classification/ARTICLE
www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1342887REPORT
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1392.jsonAdvisory
access.redhat.com/security/cve/CVE-2016-2818REPORT
www.cve.org/CVERecord?id=CVE-2016-2818AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2016-2818Advisory
www.mozilla.org/security/announce/2016/mfsa2016-49.htmlARTICLE
ubuntu.com/security/CVE-2016-2818REPORT
www.mozilla.org/en-US/security/advisories/mfsa2016-49/REPORT
ubuntu.com/security/notices/USN-2993-1Advisory
ubuntu.com/security/notices/USN-3023-1Advisory
security-tracker.debian.org/tracker/CVE-2016-2818Advisory