{"schemaVersion":3,"id":"USN-3778-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"firefox vulnerabilities\n\nA crash was discovered in TransportSecurityInfo used for SSL, which could\nbe triggered by data stored in the local cache directory. An attacker\ncould potentially exploit this in combination with another vulnerability\nthat allowed them to write data to the cache, to execute arbitrary code.\n(CVE-2018-12385)\n\nA type confusion bug was discovered in JavaScript. If a user were tricked\nin to opening a specially crafted website, an attacker could exploit this\nto cause a denial of service, or execute arbitrary code. (CVE-2018-12386)\n\nIt was discovered that the Array.prototype.push could leak memory\naddresses to the calling function in some circumstances. An attacker could\nexploit this in combination with another vulnerability to help execute\narbitrary code. (CVE-2018-12387)","dates":{"published":"2018-10-03T13:41:08.000Z","modified":"2026-04-22T09:49:49.330Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"firefox","name":"firefox","label":"firefox","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/firefox","purlType":"deb","versions":[{"text":"< 62.0.3+build1-0ubuntu0.14.04.2","noFixRecorded":false,"fixedIn":null},{"text":"< 62.0.3+build1-0ubuntu0.16.04.2","noFixRecorded":false,"fixedIn":null},{"text":"< 62.0.3+build1-0ubuntu0.18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 62.0.3+build1-0ubuntu0.14.04.2 | < 62.0.3+build1-0ubuntu0.16.04.2 | < 62.0.3+build1-0ubuntu0.18.04.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-3778-1","label":"ubuntu.com/security/notices/USN-3778-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-12385","label":"ubuntu.com/security/CVE-2018-12385","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-12386","label":"ubuntu.com/security/CVE-2018-12386","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-12387","label":"ubuntu.com/security/CVE-2018-12387","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2018-12385","CVE-2018-12386","CVE-2018-12387"],"downstream":[],"duplicates":[],"related":["CVE-2018-12385","CVE-2018-12386","CVE-2018-12387"]},"timeline":[{"kind":"published","date":"2018-10-03T13:41:08.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T09:49:49.330Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T19:55:49.537Z","stale":false,"partial":false}}