SUSE-SU-2018:2322-2: MozillaFirefox&distro=SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2018:2322-2 is a vulnerability in MozillaFirefox&distro=SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 10 · Downstream 0 · Related 10Timeline
- 18-10-2018PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for MozillaFirefox This update for MozillaFirefox to version ESR 52.9 fixes the following issues: - CVE-2018-5188: Various memory safety bugs (bsc#1098998) - CVE-2018-12368: No warning when opening executable SettingContent-ms files - CVE-2018-12366: Invalid data handling during QCMS transformations - CVE-2018-12365: Compromised IPC child process can list local filenames - CVE-2018-12364: CSRF attacks through 307 redirects and NPAPI plugins - CVE-2018-12363: Use-after-free when appending DOM nodes - CVE-2018-12362: Integer overflow in SSSE3 scaler - CVE-2018-12360: Use-after-free when using focus() - CVE-2018-5156: Media recorder segmentation fault when track type is changed during capture - CVE-2018-12359: Buffer overflow using computed size of canvas element
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- MozillaFirefox&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 52.9.0esr-109.38.2
1 vendor · 1 product