8.8

CVE-2018-5130

When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. This vulnerability affects Firefox ESR < 52.7 and Firefox < 59.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version7.0
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version17.10
Mozilla ≫ Firefox Version < 52.7.0
Mozilla ≫ Firefox Version < 59.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.39% 0.818
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://security.gentoo.org/glsa/201810-01
Third Party Advisory
http://www.securityfocus.com/bid/103388
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040514
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:0526
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0527
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html
Third Party Advisory
Mailing List
https://usn.ubuntu.com/3596-1/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4139
Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2018-06/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2018-07/
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1433005
Issue Tracking
Permissions Required