CVE-2018-5131: Infoleak

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1440775
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/
• https://www.mozilla.org/security/advisories/mfsa2018-06/
• https://www.mozilla.org/security/advisories/mfsa2018-07/
• https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html
• https://www.debian.org/security/2018/dsa-4139
• https://access.redhat.com/errata/RHSA-2018:0526
• https://access.redhat.com/errata/RHSA-2018:0527
• https://usn.ubuntu.com/3596-1/
• http://www.securityfocus.com/bid/103388
• http://www.securitytracker.com/id/1040514
• https://security.gentoo.org/glsa/201810-01
• https://launchpad.net/bugs/cve/CVE-2018-5131
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/#CVE-2018-5131
• https://bugzilla.redhat.com/show_bug.cgi?id=1555131
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/#CVE-2018-5145
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-06/
• https://security-tracker.debian.org/tracker/CVE-2018-5131
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5131
• https://nvd.nist.gov/vuln/detail/CVE-2018-5131
• https://ubuntu.com/security/CVE-2018-5131

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2018-07
• MFSA2018-06

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2018-5127
• CVE-2018-5129
• CVE-2018-5130
• CVE-2018-5131
• CVE-2018-5144
• CVE-2018-5125
• CVE-2018-5145
• CVE-2018-5128
• CVE-2018-5132
• CVE-2018-5133
• CVE-2018-5134
• CVE-2018-5135
• CVE-2018-5136
• CVE-2018-5137
• CVE-2018-5138
• CVE-2018-5140
• CVE-2018-5141
• CVE-2018-5142
• CVE-2018-5143
• CVE-2018-5126

Frequently Asked Questions

• What is CVE-2018-5131?

  CVE-2018-5131 is a vulnerability that allows the fetch() API to return transient local copies of resources that were sent with a 'no-store' or 'no-cache' cache header.

• Which software is affected by CVE-2018-5131?

  Mozilla Firefox versions up to 59, Mozilla Firefox ESR up to 52.7, Ubuntu Firefox versions up to 59.0, Ubuntu Firefox versions 59.0+ on Xenial and Artful, Ubuntu Firefox version 59.0.1+ on Bionic, Ubuntu Firefox version 59.0+ on Trusty, Debian Linux 7.0, 8.0, 9.0, Mozilla Firefox up to 59.0, Mozilla Firefox ESR up to 52.7.0, Redhat Enterprise Linux Desktop 6.0, 7.0, Redhat Enterprise Linux Server 6.0, 7.0, 7.4, 7.5, Redhat Enterprise Linux Workstation 6.0, 7.0, Canonical Ubuntu Linux 14.04, 16.04, 17.10, Debian Firefox version 119.0-1, Debian Firefox ESR versions 91.12.0esr-1~deb10u1, 115.4.0esr-1~deb10u1, 102.15.0esr-1~deb11u1, 115.4.0esr-1~deb11u1, 102.15.1esr-1~deb12u1, 115.4.0esr-1~deb12u1, 115.3.0esr-1, 115.4.0esr-1.

• What is the severity of CVE-2018-5131?

  CVE-2018-5131 has a severity of medium with a CVSS score of 5.9.

• How can I fix CVE-2018-5131?

  Update to a patched version of the affected software. Refer to the vendor's security advisory for specific instructions.

• Where can I find more information about CVE-2018-5131?

  You can find more information about CVE-2018-5131 in the following references: [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1440775), [Mozilla Security Advisory](https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/), [Mozilla Security Advisory](https://www.mozilla.org/en-US/security/advisories/mfsa2018-06/)