CVE-2017-5418: mozilla firefox Out-of-bounds Read
Vulnerability summary
CVE-2017-5418 is a medium (CVSS 5.3) Out-of-bounds Read vulnerability in mozilla firefox. EPSS estimates a 1.23% chance of exploitation in the next 30 days, higher than 68.5% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 6 · Related 5Timeline
- 11-06-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An out of bounds read error occurs when parsing some HTTP digest authorization responses, resulting in information leakage through the reading of random memory containing matches to specifically set patterns. This vulnerability affects Firefox < 52 and Thunderbird < 52.
CVSS metrics
3 scores · 2 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated5.3MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS trend
Probability
1.23%
Chance of exploitation in the next 30 days
Percentile
69%
Versus all other CVEs
30-day change
-0.03 pp
From 1.26% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.mozilla.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Mozilla2 products
- firefox≥ unspecified, < 52 | < 52.0
- thunderbird≥ unspecified, < 52 | < 52.0
Ubuntu1 product
- firefox< 52.0+build2-0ubuntu0.14.04.1 | < 52.0+build2-0ubuntu0.16.04.1
2 vendors · 3 products
References
9 links- bugzilla.mozilla.org/show_bug.cgi?id=1338876X Refsource CONFIRMExploitIssue TrackingPatchVendor Advisory