FlawAtlas
Search the atlas
SUSE-SU-2019:0336-1 Not scored

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Security issues fixed: CVE-2018-18500: Fixed a use-after-free parsing HTML5 stream (boo#1122983). CVE-2018-18501: Fixed multiple memory safety bugs (boo#1122983). CVE-2018-18505: Fixed a privilege escalation through IPC channel messages (boo#1122983).

Exploit probability Not scored
Published February 12, 2019
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Server 12 SP2-LTSS mozilla-nss
SUSE:Linux Enterprise Server 12 SP3 MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Server 12 SP2-BCL MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP4 MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Server 12 SP4 mozilla-nss
SUSE:Linux Enterprise Server 12 SP4 MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Server for SAP Applications 12 SP4 MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-BCL mozilla-nss
SUSE:Linux Enterprise Server 12 SP3 mozilla-nss
SUSE:Linux Enterprise Server 12 SP3 MozillaFirefox
SUSE:Linux Enterprise Server 12-LTSS MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 mozilla-nss
SUSE:Linux Enterprise Server 12-LTSS mozilla-nss
SUSE:Linux Enterprise Server 12 SP1-LTSS MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP3 mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 12 SP4 mozilla-nss
SUSE:Linux Enterprise Server 12 SP1-LTSS MozillaFirefox-branding-SLE
SUSE:OpenStack Cloud 7 MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Software Development Kit 12 SP4 mozilla-nss
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Desktop 12 SP3 MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Desktop 12 SP3 MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP3 MozillaFirefox
SUSE:OpenStack Cloud 7 MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP4 MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Software Development Kit 12 SP4 MozillaFirefox
SUSE:Linux Enterprise Server 12 SP1-LTSS mozilla-nss
SUSE:Enterprise Storage 4 MozillaFirefox
SUSE:Linux Enterprise Server 12 SP4 MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP3 mozilla-nss
SUSE:Linux Enterprise Desktop 12 SP4 mozilla-nss
SUSE:OpenStack Cloud 7 mozilla-nss
SUSE:Linux Enterprise Server 12 SP2-BCL MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Server 12 SP2-LTSS MozillaFirefox
SUSE:Linux Enterprise Server 12-LTSS MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 mozilla-nss
SUSE:Enterprise Storage 4 mozilla-nss
SUSE:Enterprise Storage 4 MozillaFirefox-branding-SLE
SUSE:Linux Enterprise Desktop 12 SP4 MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-LTSS MozillaFirefox-branding-SLE

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2019:0336-1

This update for MozillaFirefox fixes the following issues: Security issues fixed: CVE-2018-18500: Fixed a use-after-free parsing HTML5 stream (boo#1122983). CVE-2018-18501: Fixed multiple memory safety bugs (boo#1122983). CVE-2018-18505: Fixed a privilege escalation through IPC channel messages (boo#1122983).

View original source

05 / REFERENCES

Further evidence