CVE-2018-5096: debian debian_linux Use After Free

CVSS: 9.8v3.0CriticalModified

AliasesUBUNTU-CVE-2018-5096DEBIAN-CVE-2018-5096

Published 11-06-2018Last modified 05-08-2024

Vulnerability summary

CVE-2018-5096 is a critical (CVSS 9.8) Use After Free vulnerability in debian debian_linux. EPSS estimates a 2.85% chance of exploitation in the next 30 days, higher than 86.5% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.0 (NVD)

EPSS score

2.85%

0%100%

Low · -0.10 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 16 · Related 6

DLA-1256-1 DLA-1262-1 DSA-4096-1 DSA-4102-1 MGASA-2018-0097 MGASA-2018-0099+10 more

Timeline

11-06-2018
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Thunderbird < 52.6.

CVSS metrics

4 scores · 3 sources · 2 versions

v3.09.8v2.07.5

EPSS trend

Probability

2.85%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

-0.10 pp

From 2.96% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.85%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Redhat6 products

Show all 6

Debian3 products

firefox-esr< 52.6.0esr-1
thunderbird< 1:52.6.0-1
debian_linuxEOL7.0 | 8.0 | 9.0

Mozilla3 products

firefox< 52.6.0
firefox_esr≥ unspecified, < 52.6
thunderbird≥ unspecified, < 52.6 | < 52.6.0

Ubuntu1 product

thunderbird< 1:52.6.0+build1-0ubuntu0.14.04.1 | < 1:52.6.0+build1-0ubuntu0.16.04.1

4 vendors · 13 products

References

15 links

www.mozilla.org/security/advisories/mfsa2018-03/X Refsource CONFIRMVendor Advisory
lists.debian.org/debian-lts-announce/2018/01/msg00036.htmlMailing ListX Refsource MLISTThird Party Advisory
www.debian.org/security/2018/dsa-4096Vendor AdvisoryX Refsource DEBIANThird Party Advisory
access.redhat.com/errata/RHSA-2018:0262Vendor AdvisoryX Refsource REDHATThird Party Advisory
www.securityfocus.com/bid/102771VDB EntryX Refsource BIDThird Party Advisory
www.mozilla.org/security/advisories/mfsa2018-04/X Refsource CONFIRMVendor Advisory
access.redhat.com/errata/RHSA-2018:0122Vendor AdvisoryX Refsource REDHATThird Party Advisory
lists.debian.org/debian-lts-announce/2018/01/msg00030.htmlMailing ListX Refsource MLISTThird Party Advisory
www.debian.org/security/2018/dsa-4102Vendor AdvisoryX Refsource DEBIANThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=1418922X Refsource CONFIRMIssue TrackingPermissions RequiredVendor Advisory

Show all 15 references

ubuntu.com/security/CVE-2018-5096REPORT
www.mozilla.org/en-US/security/advisories/mfsa2018-02/REPORT
ubuntu.com/security/notices/USN-3529-1Advisory
www.cve.org/CVERecord?id=CVE-2018-5096REPORT
security-tracker.debian.org/tracker/CVE-2018-5096Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities