CVE-2018-6126

Publication date 30 May 2018

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
chromium-browser	19.04 disco	Fixed 67.0.3396.99-0ubuntu1
	18.10 cosmic	Fixed 67.0.3396.99-0ubuntu1
	18.04 LTS bionic	Fixed 67.0.3396.99-0ubuntu0.18.04.1
	17.10 artful	Fixed 67.0.3396.99-0ubuntu0.17.10.1
	16.04 LTS xenial	Fixed 67.0.3396.99-0ubuntu0.16.04.2
	14.04 LTS trusty	Not in release
firefox	19.04 disco	Fixed 61.0.1+build1-0ubuntu0.18.04.1
	18.10 cosmic	Fixed 61.0.1+build1-0ubuntu0.18.04.1
	18.04 LTS bionic	Fixed 60.0.2+build1-0ubuntu0.18.04.1
	17.10 artful	Fixed 60.0.2+build1-0ubuntu0.17.10.1
	16.04 LTS xenial	Fixed 60.0.2+build1-0ubuntu0.16.04.1
	14.04 LTS trusty	Fixed 60.0.2+build1-0ubuntu0.14.04.1
oxide-qt	19.04 disco	Not in release
	18.10 cosmic	Not in release
	18.04 LTS bionic	Not in release
	17.10 artful	Ignored end of life
	16.04 LTS xenial	Ignored Ubuntu touch end-of-life
	14.04 LTS trusty	Not in release
thunderbird	19.04 disco	Fixed 1:60.2.1+build1-0ubuntu1
	18.10 cosmic	Fixed 1:60.2.1+build1-0ubuntu1
	18.04 LTS bionic	Fixed 1:60.2.1+build1-0ubuntu0.18.04.2
	17.10 artful	Ignored end of life
	16.04 LTS xenial	Fixed 1:60.2.1+build1-0ubuntu0.16.04.4
	14.04 LTS trusty	Fixed 1:60.2.1+build1-0ubuntu0.14.04.2

Severity score breakdown

Parameter	Value
Base score	8.8 · High
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Related Ubuntu Security Notices (USN)