CVE-2018-18335: Buffer Overflow
A buffer overflow vulnerability in the Skia library can occur with Canvas 2D acceleration on macOS. This issue was addressed by disabling Canvas 2D acceleration in Firefox ESR. Note: this does not affect other versions and platforms where Canvas 2D acceleration is already disabled by default.
Other sources
A heap buffer overflow flaw was found in the Skia component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=895362
External References:
https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html
— Red Hat
Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/chromium-browserto a version that resolves this vulnerability.Fixed in 71.0.3578.80 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 60.5.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 60.5.1 - Upgrade
Upgrade
alpine/firefox-esrto a version that resolves this vulnerability.Fixed in 60.5.2-r0 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 140.12.0esr-1~deb12u1Fixed in 153.7.0esr-1~deb12u1Fixed in 140.15.0esr-1~deb13u1Fixed in 153.6.0esr-1~deb13u1Fixed in 153.5.1esr-1Fixed in 153.7.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:140.12.0esr-1~deb12u1Fixed in 1:153.6.0esr-1~deb12u2Fixed in 1:140.12.0esr-1~deb13u1Fixed in 1:153.6.0esr-1~deb13u1Fixed in 1:153.5.0esr-1Fixed in 1:153.7.0esr-1 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 71.0.3578.80 - Configuration
Disable Canvas 2D acceleration in Firefox ESR
Firefox ESR Canvas 2D acceleration = disabled
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-18335.
What is the severity of CVE-2018-18335?
The severity of CVE-2018-18335 is high with a score of 8.8.
Which software versions are affected by CVE-2018-18335?
Google Chrome versions prior to 71.0.3578.80, Mozilla Firefox ESR version up to 60.5.1, and Chromium versions up to 71.0.3578.80 are affected by CVE-2018-18335.
What platforms are affected by CVE-2018-18335?
The vulnerability affects macOS, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation, Debian Debian Linux, and openSUSE Leap.
How can I fix CVE-2018-18335?
To fix CVE-2018-18335, update to Google Chrome version 71.0.3578.80 or later, Mozilla Firefox ESR version 60.5.1 or later, or Chromium version 71.0.3578.80 or later.