Vulnerability-Lookup

UBUNTU-CVE-2018-5163 (CVE-2018-5163)

Vulnerability from osv_ubuntu – Published: 2018-05-11 00:00 – Updated: 2026-04-22 07:38 – Source website

Details

If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to replace the alternate data resources stored in the JavaScript Start-up Bytecode Cache (JSBC) for other JavaScript code. If the parent process then runs this replaced code, the executed script would be run with the parent process' privileges, escaping the sandbox on content processes. This vulnerability affects Firefox < 60.

Severity

8.1 (High)


                    
                      CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2018-5163	REPORT
	https://www.mozilla.org/en-US/security/advisories…	REPORT
	https://ubuntu.com/security/notices/USN-3645-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-5163	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "60.0+build2-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "firefox-globalmenu",
            "binary_version": "60.0+build2-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "60.0+build2-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "firefox-testsuite",
            "binary_version": "60.0+build2-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@60.0+build2-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "60.0+build2-0ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "24.0+build1-0ubuntu1",
        "25.0+build3-0ubuntu0.13.10.1",
        "28.0~b2+build1-0ubuntu2",
        "28.0+build1-0ubuntu1",
        "28.0+build2-0ubuntu1",
        "28.0+build2-0ubuntu2",
        "29.0+build1-0ubuntu0.14.04.2",
        "30.0+build1-0ubuntu0.14.04.3",
        "31.0+build1-0ubuntu0.14.04.1",
        "32.0+build1-0ubuntu0.14.04.1",
        "32.0.3+build1-0ubuntu0.14.04.1",
        "33.0+build2-0ubuntu0.14.04.1",
        "34.0+build2-0ubuntu0.14.04.1",
        "35.0+build3-0ubuntu0.14.04.2",
        "35.0.1+build1-0ubuntu0.14.04.1",
        "36.0+build2-0ubuntu0.14.04.4",
        "36.0.1+build2-0ubuntu0.14.04.1",
        "36.0.4+build1-0ubuntu0.14.04.1",
        "37.0+build2-0ubuntu0.14.04.1",
        "37.0.1+build1-0ubuntu0.14.04.1",
        "37.0.2+build1-0ubuntu0.14.04.1",
        "38.0+build3-0ubuntu0.14.04.1",
        "39.0+build5-0ubuntu0.14.04.1",
        "39.0.3+build2-0ubuntu0.14.04.1",
        "40.0+build4-0ubuntu0.14.04.1",
        "40.0+build4-0ubuntu0.14.04.4",
        "40.0.3+build1-0ubuntu0.14.04.1",
        "41.0+build3-0ubuntu0.14.04.1",
        "41.0.1+build2-0ubuntu0.14.04.1",
        "41.0.2+build2-0ubuntu0.14.04.1",
        "42.0+build2-0ubuntu0.14.04.1",
        "43.0+build1-0ubuntu0.14.04.1",
        "43.0.4+build3-0ubuntu0.14.04.1",
        "44.0+build3-0ubuntu0.14.04.1",
        "44.0.1+build2-0ubuntu0.14.04.1",
        "44.0.2+build1-0ubuntu0.14.04.1",
        "45.0+build2-0ubuntu0.14.04.1",
        "45.0.1+build1-0ubuntu0.14.04.2",
        "45.0.2+build1-0ubuntu0.14.04.1",
        "46.0+build5-0ubuntu0.14.04.2",
        "46.0.1+build1-0ubuntu0.14.04.3",
        "47.0+build3-0ubuntu0.14.04.1",
        "48.0+build2-0ubuntu0.14.04.1",
        "49.0+build4-0ubuntu0.14.04.1",
        "49.0.2+build2-0ubuntu0.14.04.1",
        "50.0+build2-0ubuntu0.14.04.2",
        "50.0.2+build1-0ubuntu0.14.04.1",
        "50.1.0+build2-0ubuntu0.14.04.1",
        "51.0.1+build2-0ubuntu0.14.04.1",
        "51.0.1+build2-0ubuntu0.14.04.2",
        "52.0+build2-0ubuntu0.14.04.1",
        "52.0.1+build2-0ubuntu0.14.04.1",
        "52.0.2+build1-0ubuntu0.14.04.1",
        "53.0+build6-0ubuntu0.14.04.1",
        "53.0.2+build1-0ubuntu0.14.04.2",
        "53.0.3+build1-0ubuntu0.14.04.2",
        "54.0+build3-0ubuntu0.14.04.1",
        "55.0.1+build2-0ubuntu0.14.04.2",
        "55.0.2+build1-0ubuntu0.14.04.1",
        "56.0+build6-0ubuntu0.14.04.1",
        "56.0+build6-0ubuntu0.14.04.2",
        "57.0+build4-0ubuntu0.14.04.4",
        "57.0+build4-0ubuntu0.14.04.5",
        "57.0.1+build2-0ubuntu0.14.04.1",
        "57.0.3+build1-0ubuntu0.14.04.1",
        "57.0.4+build1-0ubuntu0.14.04.1",
        "58.0+build6-0ubuntu0.14.04.1",
        "58.0.1+build1-0ubuntu0.14.04.1",
        "58.0.2+build1-0ubuntu0.14.04.1",
        "59.0+build5-0ubuntu0.14.04.1",
        "59.0.1+build1-0ubuntu0.14.04.1",
        "59.0.2+build1-0ubuntu0.14.04.1",
        "59.0.2+build1-0ubuntu0.14.04.4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "60.0+build2-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "firefox-globalmenu",
            "binary_version": "60.0+build2-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "60.0+build2-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "firefox-testsuite",
            "binary_version": "60.0+build2-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@60.0+build2-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "60.0+build2-0ubuntu0.16.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "41.0.2+build2-0ubuntu1",
        "42.0+build2-0ubuntu1",
        "44.0+build3-0ubuntu2",
        "44.0.1+build1-0ubuntu1",
        "44.0.2+build1-0ubuntu1",
        "45.0+build2-0ubuntu1",
        "45.0.1+build1-0ubuntu1",
        "45.0.2+build1-0ubuntu1",
        "46.0+build5-0ubuntu0.16.04.2",
        "46.0.1+build1-0ubuntu0.16.04.2",
        "47.0+build3-0ubuntu0.16.04.1",
        "48.0+build2-0ubuntu0.16.04.1",
        "49.0+build4-0ubuntu0.16.04.1",
        "49.0.2+build2-0ubuntu0.16.04.2",
        "50.0+build2-0ubuntu0.16.04.2",
        "50.0.2+build1-0ubuntu0.16.04.1",
        "50.1.0+build2-0ubuntu0.16.04.1",
        "51.0.1+build2-0ubuntu0.16.04.1",
        "51.0.1+build2-0ubuntu0.16.04.2",
        "52.0+build2-0ubuntu0.16.04.1",
        "52.0.1+build2-0ubuntu0.16.04.1",
        "52.0.2+build1-0ubuntu0.16.04.1",
        "53.0+build6-0ubuntu0.16.04.1",
        "53.0.2+build1-0ubuntu0.16.04.2",
        "53.0.3+build1-0ubuntu0.16.04.2",
        "54.0+build3-0ubuntu0.16.04.1",
        "55.0.1+build2-0ubuntu0.16.04.2",
        "55.0.2+build1-0ubuntu0.16.04.1",
        "56.0+build6-0ubuntu0.16.04.1",
        "56.0+build6-0ubuntu0.16.04.2",
        "57.0+build4-0ubuntu0.16.04.5",
        "57.0+build4-0ubuntu0.16.04.6",
        "57.0.1+build2-0ubuntu0.16.04.1",
        "57.0.3+build1-0ubuntu0.16.04.1",
        "57.0.4+build1-0ubuntu0.16.04.1",
        "58.0+build6-0ubuntu0.16.04.1",
        "58.0.1+build1-0ubuntu0.16.04.1",
        "58.0.2+build1-0ubuntu0.16.04.1",
        "59.0+build5-0ubuntu0.16.04.1",
        "59.0.1+build1-0ubuntu0.16.04.1",
        "59.0.2+build1-0ubuntu0.16.04.1",
        "59.0.2+build1-0ubuntu0.16.04.3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "60.0+build2-0ubuntu1"
          },
          {
            "binary_name": "firefox-globalmenu",
            "binary_version": "60.0+build2-0ubuntu1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "60.0+build2-0ubuntu1"
          },
          {
            "binary_name": "firefox-testsuite",
            "binary_version": "60.0+build2-0ubuntu1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@60.0+build2-0ubuntu1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "60.0+build2-0ubuntu1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "56.0+build6-0ubuntu1",
        "57.0.1+build2-0ubuntu1",
        "59.0.1+build1-0ubuntu1",
        "59.0.2+build1-0ubuntu1"
      ]
    }
  ],
  "aliases": [],
  "details": "If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to replace the alternate data resources stored in the JavaScript Start-up Bytecode Cache (JSBC) for other JavaScript code. If the parent process then runs this replaced code, the executed script would be run with the parent process\u0027 privileges, escaping the sandbox on content processes. This vulnerability affects Firefox \u003c 60.",
  "id": "UBUNTU-CVE-2018-5163",
  "modified": "2026-04-22T07:38:32Z",
  "published": "2018-05-11T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5163"
    },
    {
      "type": "REPORT",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-11/#CVE-2018-5163"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3645-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-5163"
    }
  ],
  "related": [
    "USN-3645-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-5163"
  ]
}

CVE-2018-5163 (GCVE-0-2018-5163)

Vulnerability from cvelistv5 – Published: 2018-06-11 21:00 – Updated: 2024-08-05 05:26

Summary

Severity

No CVSS data available.

CWE

Replacing cached data in JavaScript Start-up Bytecode Cache

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 508 records in the last 180 days details

References

5 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1426353	x_refsource_CONFIRM
https://www.mozilla.org/security/advisories/mfsa2…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1040896	vdb-entryx_refsource_SECTRACK
https://usn.ubuntu.com/3645-1/	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/104139	vdb-entryx_refsource_BID

Impacted products

1 product

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 60 (custom)

Date Public

2018-05-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:26:47.037Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1426353"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-11/"
          },
          {
            "name": "1040896",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040896"
          },
          {
            "name": "USN-3645-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3645-1/"
          },
          {
            "name": "104139",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104139"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-05-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to replace the alternate data resources stored in the JavaScript Start-up Bytecode Cache (JSBC) for other JavaScript code. If the parent process then runs this replaced code, the executed script would be run with the parent process\u0027 privileges, escaping the sandbox on content processes. This vulnerability affects Firefox \u003c 60."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Replacing cached data in JavaScript Start-up Bytecode Cache",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01.000Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1426353"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-11/"
        },
        {
          "name": "1040896",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040896"
        },
        {
          "name": "USN-3645-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3645-1/"
        },
        {
          "name": "104139",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104139"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2018-5163",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to replace the alternate data resources stored in the JavaScript Start-up Bytecode Cache (JSBC) for other JavaScript code. If the parent process then runs this replaced code, the executed script would be run with the parent process\u0027 privileges, escaping the sandbox on content processes. This vulnerability affects Firefox \u003c 60."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Replacing cached data in JavaScript Start-up Bytecode Cache"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1426353",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1426353"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-11/"
            },
            {
              "name": "1040896",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040896"
            },
            {
              "name": "USN-3645-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3645-1/"
            },
            {
              "name": "104139",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104139"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2018-5163",
    "datePublished": "2018-06-11T21:00:00.000Z",
    "dateReserved": "2018-01-03T00:00:00.000Z",
    "dateUpdated": "2024-08-05T05:26:47.037Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

USN-3645-1 (UBUNTU-CVE-2018-5150)

Vulnerability from osv_ubuntu – Published: 2018-05-11 16:17 – Updated: 2026-04-22 07:36 – Source website

Summary

firefox vulnerabilities

Details

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, bypass same-origin restrictions, conduct cross-site scripting (XSS) attacks, install lightweight themes without user interaction, spoof the filename in the downloads panel, or execute arbitrary code. (CVE-2018-5150, CVE-2018-5151, CVE-2018-5153, CVE-2018-5154, CVE-2018-5155, CVE-2018-5157, CVE-2018-5158, CVE-2018-5159, CVE-2018-5160, CVE-2018-5163, CVE-2018-5164, CVE-2018-5168, CVE-2018-5173, CVE-2018-5175, CVE-2018-5177, CVE-2018-5180)

Multiple security issues were discovered with WebExtensions. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to obtain sensitive information, or bypass security restrictions. (CVE-2018-5152, CVE-2018-5166)

It was discovered that the web console and JavaScript debugger incorrectly linkified chrome: and javascript URLs. If a user were tricked in to clicking a specially crafted link, an attacker could potentially exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2018-5167)

It was discovered that dragging and dropping link text on to the home button could set the home page to include chrome pages. If a user were tricked in to dragging and dropping a specially crafted link on to the home button, an attacker could potentially exploit this bypass security restrictions. (CVE-2018-5169)

It was discovered that the Live Bookmarks page and PDF viewer would run script pasted from the clipboard. If a user were tricked in to copying and pasting specially crafted text, an attacker could potentially exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2018-5172)

It was discovered that the JSON viewer incorrectly linkified javascript: URLs. If a user were tricked in to clicking on a specially crafted link, an attacker could potentially exploit this to obtain sensitive information. (CVE-2018-5176)

It was discovered that dragging a file: URL on to a tab that is running in a different process would cause the file to open in that process. If a user were tricked in to dragging a file: URL, an attacker could potentially exploit this to bypass intended security policies. (CVE-2018-5181)

It was discovered that dragging text that is a file: URL on to the addressbar would open the specified file. If a user were tricked in to dragging specially crafted text on to the addressbar, an attacker could potentially exploit this to bypass intended security policies. (CVE-2018-5182)

References

URL

Type

	https://ubuntu.com/security/notices/USN-3645-1	ADVISORY
	https://ubuntu.com/security/CVE-2018-5150	REPORT
	https://ubuntu.com/security/CVE-2018-5151	REPORT
	https://ubuntu.com/security/CVE-2018-5152	REPORT
	https://ubuntu.com/security/CVE-2018-5153	REPORT
	https://ubuntu.com/security/CVE-2018-5154	REPORT
	https://ubuntu.com/security/CVE-2018-5155	REPORT
	https://ubuntu.com/security/CVE-2018-5157	REPORT
	https://ubuntu.com/security/CVE-2018-5158	REPORT
	https://ubuntu.com/security/CVE-2018-5159	REPORT
	https://ubuntu.com/security/CVE-2018-5160	REPORT
	https://ubuntu.com/security/CVE-2018-5163	REPORT
	https://ubuntu.com/security/CVE-2018-5164	REPORT
	https://ubuntu.com/security/CVE-2018-5166	REPORT
	https://ubuntu.com/security/CVE-2018-5167	REPORT
	https://ubuntu.com/security/CVE-2018-5168	REPORT
	https://ubuntu.com/security/CVE-2018-5169	REPORT
	https://ubuntu.com/security/CVE-2018-5172	REPORT
	https://ubuntu.com/security/CVE-2018-5173	REPORT
	https://ubuntu.com/security/CVE-2018-5175	REPORT
	https://ubuntu.com/security/CVE-2018-5176	REPORT
	https://ubuntu.com/security/CVE-2018-5177	REPORT
	https://ubuntu.com/security/CVE-2018-5180	REPORT
	https://ubuntu.com/security/CVE-2018-5181	REPORT
	https://ubuntu.com/security/CVE-2018-5182	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-5150",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5151",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5152",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5153",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5154",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5155",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5157",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5158",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5159",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5160",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5163",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5164",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5166",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5167",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5168",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5169",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5172",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5173",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5175",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5176",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5177",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5180",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5181",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5182",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "60.0+build2-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "firefox-globalmenu",
            "binary_version": "60.0+build2-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "60.0+build2-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "firefox-testsuite",
            "binary_version": "60.0+build2-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@60.0+build2-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "60.0+build2-0ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "24.0+build1-0ubuntu1",
        "25.0+build3-0ubuntu0.13.10.1",
        "28.0~b2+build1-0ubuntu2",
        "28.0+build1-0ubuntu1",
        "28.0+build2-0ubuntu1",
        "28.0+build2-0ubuntu2",
        "29.0+build1-0ubuntu0.14.04.2",
        "30.0+build1-0ubuntu0.14.04.3",
        "31.0+build1-0ubuntu0.14.04.1",
        "32.0+build1-0ubuntu0.14.04.1",
        "32.0.3+build1-0ubuntu0.14.04.1",
        "33.0+build2-0ubuntu0.14.04.1",
        "34.0+build2-0ubuntu0.14.04.1",
        "35.0+build3-0ubuntu0.14.04.2",
        "35.0.1+build1-0ubuntu0.14.04.1",
        "36.0+build2-0ubuntu0.14.04.4",
        "36.0.1+build2-0ubuntu0.14.04.1",
        "36.0.4+build1-0ubuntu0.14.04.1",
        "37.0+build2-0ubuntu0.14.04.1",
        "37.0.1+build1-0ubuntu0.14.04.1",
        "37.0.2+build1-0ubuntu0.14.04.1",
        "38.0+build3-0ubuntu0.14.04.1",
        "39.0+build5-0ubuntu0.14.04.1",
        "39.0.3+build2-0ubuntu0.14.04.1",
        "40.0+build4-0ubuntu0.14.04.1",
        "40.0+build4-0ubuntu0.14.04.4",
        "40.0.3+build1-0ubuntu0.14.04.1",
        "41.0+build3-0ubuntu0.14.04.1",
        "41.0.1+build2-0ubuntu0.14.04.1",
        "41.0.2+build2-0ubuntu0.14.04.1",
        "42.0+build2-0ubuntu0.14.04.1",
        "43.0+build1-0ubuntu0.14.04.1",
        "43.0.4+build3-0ubuntu0.14.04.1",
        "44.0+build3-0ubuntu0.14.04.1",
        "44.0.1+build2-0ubuntu0.14.04.1",
        "44.0.2+build1-0ubuntu0.14.04.1",
        "45.0+build2-0ubuntu0.14.04.1",
        "45.0.1+build1-0ubuntu0.14.04.2",
        "45.0.2+build1-0ubuntu0.14.04.1",
        "46.0+build5-0ubuntu0.14.04.2",
        "46.0.1+build1-0ubuntu0.14.04.3",
        "47.0+build3-0ubuntu0.14.04.1",
        "48.0+build2-0ubuntu0.14.04.1",
        "49.0+build4-0ubuntu0.14.04.1",
        "49.0.2+build2-0ubuntu0.14.04.1",
        "50.0+build2-0ubuntu0.14.04.2",
        "50.0.2+build1-0ubuntu0.14.04.1",
        "50.1.0+build2-0ubuntu0.14.04.1",
        "51.0.1+build2-0ubuntu0.14.04.1",
        "51.0.1+build2-0ubuntu0.14.04.2",
        "52.0+build2-0ubuntu0.14.04.1",
        "52.0.1+build2-0ubuntu0.14.04.1",
        "52.0.2+build1-0ubuntu0.14.04.1",
        "53.0+build6-0ubuntu0.14.04.1",
        "53.0.2+build1-0ubuntu0.14.04.2",
        "53.0.3+build1-0ubuntu0.14.04.2",
        "54.0+build3-0ubuntu0.14.04.1",
        "55.0.1+build2-0ubuntu0.14.04.2",
        "55.0.2+build1-0ubuntu0.14.04.1",
        "56.0+build6-0ubuntu0.14.04.1",
        "56.0+build6-0ubuntu0.14.04.2",
        "57.0+build4-0ubuntu0.14.04.4",
        "57.0+build4-0ubuntu0.14.04.5",
        "57.0.1+build2-0ubuntu0.14.04.1",
        "57.0.3+build1-0ubuntu0.14.04.1",
        "57.0.4+build1-0ubuntu0.14.04.1",
        "58.0+build6-0ubuntu0.14.04.1",
        "58.0.1+build1-0ubuntu0.14.04.1",
        "58.0.2+build1-0ubuntu0.14.04.1",
        "59.0+build5-0ubuntu0.14.04.1",
        "59.0.1+build1-0ubuntu0.14.04.1",
        "59.0.2+build1-0ubuntu0.14.04.1",
        "59.0.2+build1-0ubuntu0.14.04.4"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-5150",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5151",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5152",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5153",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5154",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5155",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5157",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5158",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5159",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5160",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5163",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5164",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5166",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5167",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5168",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5169",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5172",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5173",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5175",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5176",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5177",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5180",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5181",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5182",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "60.0+build2-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "firefox-globalmenu",
            "binary_version": "60.0+build2-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "60.0+build2-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "firefox-testsuite",
            "binary_version": "60.0+build2-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@60.0+build2-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "60.0+build2-0ubuntu0.16.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "41.0.2+build2-0ubuntu1",
        "42.0+build2-0ubuntu1",
        "44.0+build3-0ubuntu2",
        "44.0.1+build1-0ubuntu1",
        "44.0.2+build1-0ubuntu1",
        "45.0+build2-0ubuntu1",
        "45.0.1+build1-0ubuntu1",
        "45.0.2+build1-0ubuntu1",
        "46.0+build5-0ubuntu0.16.04.2",
        "46.0.1+build1-0ubuntu0.16.04.2",
        "47.0+build3-0ubuntu0.16.04.1",
        "48.0+build2-0ubuntu0.16.04.1",
        "49.0+build4-0ubuntu0.16.04.1",
        "49.0.2+build2-0ubuntu0.16.04.2",
        "50.0+build2-0ubuntu0.16.04.2",
        "50.0.2+build1-0ubuntu0.16.04.1",
        "50.1.0+build2-0ubuntu0.16.04.1",
        "51.0.1+build2-0ubuntu0.16.04.1",
        "51.0.1+build2-0ubuntu0.16.04.2",
        "52.0+build2-0ubuntu0.16.04.1",
        "52.0.1+build2-0ubuntu0.16.04.1",
        "52.0.2+build1-0ubuntu0.16.04.1",
        "53.0+build6-0ubuntu0.16.04.1",
        "53.0.2+build1-0ubuntu0.16.04.2",
        "53.0.3+build1-0ubuntu0.16.04.2",
        "54.0+build3-0ubuntu0.16.04.1",
        "55.0.1+build2-0ubuntu0.16.04.2",
        "55.0.2+build1-0ubuntu0.16.04.1",
        "56.0+build6-0ubuntu0.16.04.1",
        "56.0+build6-0ubuntu0.16.04.2",
        "57.0+build4-0ubuntu0.16.04.5",
        "57.0+build4-0ubuntu0.16.04.6",
        "57.0.1+build2-0ubuntu0.16.04.1",
        "57.0.3+build1-0ubuntu0.16.04.1",
        "57.0.4+build1-0ubuntu0.16.04.1",
        "58.0+build6-0ubuntu0.16.04.1",
        "58.0.1+build1-0ubuntu0.16.04.1",
        "58.0.2+build1-0ubuntu0.16.04.1",
        "59.0+build5-0ubuntu0.16.04.1",
        "59.0.1+build1-0ubuntu0.16.04.1",
        "59.0.2+build1-0ubuntu0.16.04.1",
        "59.0.2+build1-0ubuntu0.16.04.3"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-5150",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5151",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5152",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5153",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5154",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5155",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5157",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5158",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5159",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5160",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5163",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5164",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5166",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5167",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5168",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5169",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5172",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5173",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5175",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5176",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5177",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5180",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5181",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5182",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "60.0+build2-0ubuntu1"
          },
          {
            "binary_name": "firefox-globalmenu",
            "binary_version": "60.0+build2-0ubuntu1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "60.0+build2-0ubuntu1"
          },
          {
            "binary_name": "firefox-testsuite",
            "binary_version": "60.0+build2-0ubuntu1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@60.0+build2-0ubuntu1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "60.0+build2-0ubuntu1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "56.0+build6-0ubuntu1",
        "57.0.1+build2-0ubuntu1",
        "59.0.1+build1-0ubuntu1",
        "59.0.2+build1-0ubuntu1"
      ]
    }
  ],
  "aliases": [],
  "details": "Multiple security issues were discovered in Firefox. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit these to cause a denial of service via application\ncrash, bypass same-origin restrictions, conduct cross-site scripting (XSS)\nattacks, install lightweight themes without user interaction, spoof the\nfilename in the downloads panel, or execute arbitrary code.\n(CVE-2018-5150, CVE-2018-5151, CVE-2018-5153, CVE-2018-5154,\nCVE-2018-5155, CVE-2018-5157, CVE-2018-5158, CVE-2018-5159, CVE-2018-5160,\nCVE-2018-5163, CVE-2018-5164, CVE-2018-5168, CVE-2018-5173, CVE-2018-5175,\nCVE-2018-5177, CVE-2018-5180)\n\nMultiple security issues were discovered with WebExtensions. If a user\nwere tricked in to installing a specially crafted extension, an attacker\ncould potentially exploit these to obtain sensitive information, or bypass\nsecurity restrictions. (CVE-2018-5152, CVE-2018-5166)\n\nIt was discovered that the web console and JavaScript debugger incorrectly\nlinkified chrome: and javascript URLs. If a user were tricked in to\nclicking a specially crafted link, an attacker could potentially exploit\nthis to conduct cross-site scripting (XSS) attacks. (CVE-2018-5167)\n\nIt was discovered that dragging and dropping link text on to the home\nbutton could set the home page to include chrome pages. If a user were\ntricked in to dragging and dropping a specially crafted link on to the\nhome button, an attacker could potentially exploit this bypass security\nrestrictions. (CVE-2018-5169)\n\nIt was discovered that the Live Bookmarks page and PDF viewer would run\nscript pasted from the clipboard. If a user were tricked in to copying and\npasting specially crafted text, an attacker could potentially exploit this\nto conduct cross-site scripting (XSS) attacks. (CVE-2018-5172)\n\nIt was discovered that the JSON viewer incorrectly linkified javascript:\nURLs. If a user were tricked in to clicking on a specially crafted link,\nan attacker could potentially exploit this to obtain sensitive\ninformation. (CVE-2018-5176)\n\nIt was discovered that dragging a file: URL on to a tab that is running in\na different process would cause the file to open in that process. If a\nuser were tricked in to dragging a file: URL, an attacker could\npotentially exploit this to bypass intended security policies.\n(CVE-2018-5181)\n\nIt was discovered that dragging text that is a file: URL on to the\naddressbar would open the specified file. If a user were tricked in to\ndragging specially crafted text on to the addressbar, an attacker could\npotentially exploit this to bypass intended security policies.\n(CVE-2018-5182)\n",
  "id": "USN-3645-1",
  "modified": "2026-04-22T07:36:35Z",
  "published": "2018-05-11T16:17:01Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3645-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5150"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5151"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5152"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5153"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5154"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5155"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5157"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5158"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5159"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5160"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5163"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5164"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5166"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5167"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5168"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5169"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5172"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5173"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5175"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5176"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5177"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5180"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5181"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5182"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "firefox vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2018-5150",
    "UBUNTU-CVE-2018-5151",
    "UBUNTU-CVE-2018-5152",
    "UBUNTU-CVE-2018-5153",
    "UBUNTU-CVE-2018-5154",
    "UBUNTU-CVE-2018-5155",
    "UBUNTU-CVE-2018-5157",
    "UBUNTU-CVE-2018-5158",
    "UBUNTU-CVE-2018-5159",
    "UBUNTU-CVE-2018-5160",
    "UBUNTU-CVE-2018-5163",
    "UBUNTU-CVE-2018-5164",
    "UBUNTU-CVE-2018-5166",
    "UBUNTU-CVE-2018-5167",
    "UBUNTU-CVE-2018-5168",
    "UBUNTU-CVE-2018-5169",
    "UBUNTU-CVE-2018-5172",
    "UBUNTU-CVE-2018-5173",
    "UBUNTU-CVE-2018-5175",
    "UBUNTU-CVE-2018-5176",
    "UBUNTU-CVE-2018-5177",
    "UBUNTU-CVE-2018-5180",
    "UBUNTU-CVE-2018-5181",
    "UBUNTU-CVE-2018-5182"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

UBUNTU-CVE-2018-5163 (CVE-2018-5163)

CVE-2018-5163 (GCVE-0-2018-5163)

USN-3645-1 (UBUNTU-CVE-2018-5150)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour