Oval Definition:oval:com.ubuntu.bionic:def:201812386000
Revision Date:2018-10-18Version:1
Title:CVE-2018-12386 on Ubuntu 18.04 LTS (bionic) - medium.
Description:A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2018-12386
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND Package Information
  • The 'firefox' package in bionic was vulnerable but has been fixed (note: '62.0.3+build1-0ubuntu0.18.04.1').
  • OR The vulnerability of the 'mozjs38' package in bionic is not known (status: 'needs-triage'). It is pending evaluation.
  • OR The vulnerability of the 'mozjs52' package in bionic is not known (status: 'needs-triage'). It is pending evaluation.
  • OR The vulnerability of the 'thunderbird' package in bionic is not known (status: 'needs-triage'). It is pending evaluation.
    • BACK