Oval Definition:	oval:org.opensuse.security:def:201812371
Revision Date: 2022-09-02 Version: 1 Title: CVE-2018-12371 Description: An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 60.1, Thunderbird < 60, and Firefox < 61. Family: unix Class: vulnerability Status: Reference(s): CVE-2018-12371 SUSE-SU-2018:3247-1 openSUSE-SU-2018:1833-1 openSUSE-SU-2018:2658-1 openSUSE-SU-2018:3051-1 openSUSE-SU-2018:3687-1 Mitre CVE-2018-12371 SUSE CVE-2018-12371 SUSE-SU-2018:3247-1 openSUSE-SU-2018:1833-1 openSUSE-SU-2018:2658-1 openSUSE-SU-2018:3051-1 openSUSE-SU-2018:3687-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap 42.3 openSUSE Tumbleweed SUSE CaaS Platform 4.0 SUSE Linux Enterprise Desktop 15 SP1 SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise Desktop 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0 SUSE Package Hub for SUSE Linux Enterprise 12 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information MozillaFirefox-60.1.0-lp150.3.11 is installed AND MozillaFirefox is signed with openSUSE key OR MozillaFirefox-branding-upstream-60.1.0-lp150.3.11 is installed AND MozillaFirefox-branding-upstream is signed with openSUSE key OR MozillaFirefox-buildsymbols-60.1.0-lp150.3.11 is installed AND MozillaFirefox-buildsymbols is signed with openSUSE key OR MozillaFirefox-devel-60.1.0-lp150.3.11 is installed AND MozillaFirefox-devel is signed with openSUSE key OR MozillaFirefox-translations-common-60.1.0-lp150.3.11 is installed AND MozillaFirefox-translations-common is signed with openSUSE key OR MozillaFirefox-translations-other-60.1.0-lp150.3.11 is installed AND MozillaFirefox-translations-other is signed with openSUSE key OR MozillaThunderbird-60.2.1-lp150.3.19 is installed AND MozillaThunderbird is signed with openSUSE key OR MozillaThunderbird-buildsymbols-60.2.1-lp150.3.19 is installed AND MozillaThunderbird-buildsymbols is signed with openSUSE key OR MozillaThunderbird-translations-common-60.2.1-lp150.3.19 is installed AND MozillaThunderbird-translations-common is signed with openSUSE key OR MozillaThunderbird-translations-other-60.2.1-lp150.3.19 is installed AND MozillaThunderbird-translations-other is signed with openSUSE key Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information MozillaFirefox-60.1.0-106 is installed AND MozillaFirefox is signed with openSUSE key OR MozillaFirefox-branding-upstream-60.1.0-106 is installed AND MozillaFirefox-branding-upstream is signed with openSUSE key OR MozillaFirefox-buildsymbols-60.1.0-106 is installed AND MozillaFirefox-buildsymbols is signed with openSUSE key OR MozillaFirefox-devel-60.1.0-106 is installed AND MozillaFirefox-devel is signed with openSUSE key OR MozillaFirefox-translations-common-60.1.0-106 is installed AND MozillaFirefox-translations-common is signed with openSUSE key OR MozillaFirefox-translations-other-60.1.0-106 is installed AND MozillaFirefox-translations-other is signed with openSUSE key OR MozillaThunderbird-60.2.1-77 is installed AND MozillaThunderbird is signed with openSUSE key OR MozillaThunderbird-buildsymbols-60.2.1-77 is installed AND MozillaThunderbird-buildsymbols is signed with openSUSE key OR MozillaThunderbird-translations-common-60.2.1-77 is installed AND MozillaThunderbird-translations-common is signed with openSUSE key OR MozillaThunderbird-translations-other-60.2.1-77 is installed AND MozillaThunderbird-translations-other is signed with openSUSE key Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-60.2.1-3.13 is installed OR MozillaThunderbird-translations-common-60.2.1-3.13 is installed OR MozillaThunderbird-translations-other-60.2.1-3.13 is installed Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 12 is installed AND Package Information MozillaThunderbird-60.3.0-74 is installed OR MozillaThunderbird-buildsymbols-60.3.0-74 is installed OR MozillaThunderbird-translations-common-60.3.0-74 is installed OR MozillaThunderbird-translations-other-60.3.0-74 is installed Definition Synopsis Release Information SUSE Linux Enterprise Workstation Extension 15 is installed AND MozillaThunderbird-60.2.1-3.13 is installed OR MozillaThunderbird-translations-common-60.2.1-3.13 is installed OR MozillaThunderbird-translations-other-60.2.1-3.13 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND MozillaThunderbird-60.6.1-3.28 is installed OR MozillaThunderbird-translations-common-60.6.1-3.28 is installed OR MozillaThunderbird-translations-other-60.6.1-3.28 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-60.6.1-3.28 is installed OR MozillaThunderbird-translations-common-60.6.1-3.28 is installed OR MozillaThunderbird-translations-other-60.6.1-3.28 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information MozillaThunderbird-68.8.0-3.80 is installed OR MozillaThunderbird-translations-common-68.8.0-3.80 is installed OR MozillaThunderbird-translations-other-68.8.0-3.80 is installed Definition Synopsis Release Information SUSE Linux Enterprise Workstation Extension 15 is installed AND MozillaThunderbird-60.2.1-3.13 is installed OR MozillaThunderbird-translations-common-60.2.1-3.13 is installed OR MozillaThunderbird-translations-other-60.2.1-3.13 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND MozillaThunderbird-60.6.1-3.28 is installed OR MozillaThunderbird-translations-common-60.6.1-3.28 is installed OR MozillaThunderbird-translations-other-60.6.1-3.28 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND MozillaThunderbird-68.8.0-3.80 is installed OR MozillaThunderbird-translations-common-68.8.0-3.80 is installed OR MozillaThunderbird-translations-other-68.8.0-3.80 is installed Definition Synopsis openSUSE Tumbleweed is installed AND Package Information MozillaFirefox-92.0-1.2 is installed OR MozillaFirefox-branding-upstream-92.0-1.2 is installed OR MozillaFirefox-devel-92.0-1.2 is installed OR MozillaFirefox-translations-common-92.0-1.2 is installed OR MozillaFirefox-translations-other-92.0-1.2 is installed OR MozillaThunderbird-91.1.1-1.1 is installed OR MozillaThunderbird-translations-common-91.1.1-1.1 is installed OR MozillaThunderbird-translations-other-91.1.1-1.1 is installed Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 12 is installed AND Package Information MozillaThunderbird-60.3.0-74.2 is installed OR MozillaThunderbird-buildsymbols-60.3.0-74.2 is installed OR MozillaThunderbird-translations-common-60.3.0-74.2 is installed OR MozillaThunderbird-translations-other-60.3.0-74.2 is installed Definition Synopsis Release Information SUSE CaaS Platform 4.0 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed AND MozillaFirefox is affected OR MozillaFirefox-devel is affected OR MozillaFirefox-translations-common is affected OR MozillaFirefox-translations-other is affected OR Package Information SUSE Linux Enterprise Desktop 15 SP1 is installed OR SUSE Linux Enterprise Server 15 SP1 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND MozillaThunderbird-60.6.1-3.28.1 is installed OR MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed OR MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed Definition Synopsis Release Information SUSE Manager Proxy 4.0 is installed OR SUSE Manager Retail Branch Server 4.0 is installed OR SUSE Manager Server 4.0 is installed AND MozillaFirefox is affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed AND MozillaFirefox is affected OR MozillaFirefox-devel is affected OR MozillaFirefox-translations-common is affected OR MozillaFirefox-translations-other is affected OR Package Information SUSE Linux Enterprise Desktop 15 SP1 is installed OR SUSE Linux Enterprise Server 15 SP1 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND MozillaThunderbird-60.6.1-3.28.1 is installed OR MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed OR MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information MozillaThunderbird-68.8.0-3.80.2 is installed OR MozillaThunderbird-translations-common-68.8.0-3.80.2 is installed OR MozillaThunderbird-translations-other-68.8.0-3.80.2 is installed Definition Synopsis openSUSE Leap 15.3 is installed AND Package Information MozillaThunderbird-78.10.0-bp153.1.1 is installed AND MozillaThunderbird is signed with openSUSE key OR MozillaThunderbird-translations-common-78.10.0-bp153.1.1 is installed AND MozillaThunderbird-translations-common is signed with openSUSE key OR MozillaThunderbird-translations-other-78.10.0-bp153.1.1 is installed AND MozillaThunderbird-translations-other is signed with openSUSE key Definition Synopsis openSUSE Leap 15.4 is installed AND Package Information MozillaThunderbird-91.8.0-150200.8.65.1 is installed AND MozillaThunderbird is signed with openSUSE key OR MozillaThunderbird-translations-common-91.8.0-150200.8.65.1 is installed AND MozillaThunderbird-translations-common is signed with openSUSE key OR MozillaThunderbird-translations-other-91.8.0-150200.8.65.1 is installed AND MozillaThunderbird-translations-other is signed with openSUSE key Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP4 is installed OR SUSE Linux Enterprise Server 15 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP4 is installed AND Package Information MozillaThunderbird-91.8.0-150200.8.65.1 is installed OR MozillaThunderbird-translations-common-91.8.0-150200.8.65.1 is installed OR MozillaThunderbird-translations-other-91.8.0-150200.8.65.1 is installed
BACK