Use-after-free error in Google Chrome - CVE-2018-18356

Vulnerability identifier: #VU16255

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-18356

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to use-after-free error in Skia when handling malicious input. A remote attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and cause the browser to crash.

Google Chrome
Firefox ESR
Mozilla Firefox
Arch Linux
Gentoo Linux
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Power
Slackware Linux
Opensuse
Fedora
SUSE Package Hub for SUSE Linux Enterprise
thunderbird (Ubuntu package)
firefox (Ubuntu package)
firefox-esr (Alpine package)
firefox-esr (Debian package)
thunderbird (Debian package)
chromium-browser (Debian package)
chromium
Mozilla Thunderbird

Update to version 71.0.3578.80.

Google Chrome - update to 71.0.3578.80
thunderbird (Ubuntu package) - addressed in versions 1:60.5.1+build2-0ubuntu0.14.04.1, 1:60.5.1+build2-0ubuntu0.16.04.1, 1:60.5.1+build2-0ubuntu0.18.04.1, 1:60.5.1+build2-0ubuntu0.18.10.1
firefox (Ubuntu package) - addressed in versions 65.0.1+build2-0ubuntu0.14.04.1, 65.0.1+build2-0ubuntu0.16.04.1, 65.0.1+build2-0ubuntu0.18.04.1, 65.0.1+build2-0ubuntu0.18.10.1
Firefox ESR - update to 60.5.1
Mozilla Firefox - update to 65.0.1
Mozilla Thunderbird - update to 60.5.1
firefox-esr (Alpine package) - update to 60.5.2-r0
firefox-esr (Debian package) - update to 60.5.1esr-1~deb9u1
thunderbird (Debian package) - update to 1:60.5.1-1~deb9u1
chromium-browser (Debian package) - update to 71.0.3578.80-1~deb9u1
chromium - addressed in versions 71.0.3578.98-1.fc28, 71.0.3578.98-1.fc29

• https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

• Multiple vulnerabilities in Google Chrome
• Debian update for chromium-browser
• OpenSUSE Linux update for Chromium
• Arch Linux update for chromium
• OpenSUSE Linux update for Chromium
• Red Hat update for google chrome
• Multiple vulnerabilities in Mozilla Firefox
• Multiple vulnerabilities in Firefox ESR
• Slackware Linux update for mozilla-firefox
• Arch Linux update for firefox
• Multiple vulnerabilities in Mozilla Thunderbird
• Slackware Linux update for mozilla-thunderbird
• Debian update for firefox-esr
• Debian update for thunderbird
• OpenSUSE Linux update for MozillaFirefox
• Ubuntu update for Firefox
• Ubuntu update for Thunderbird
• OpenSUSE Linux update for MozillaThunderbird
• OpenSUSE Linux update for MozillaThunderbird
• Arch Linux update for thunderbird
• OpenSUSE Linux update for MozillaFirefox
• OpenSUSE Linux update for MozillaThunderbird
• OpenSUSE Linux update for MozillaThunderbird
• Gentoo update for Mozilla Firefox
• Red Hat update for firefox
• Red Hat update for firefox
• Use-after-free error in firefox-esr (Alpine package)
• Fedora 29 update for chromium
• Fedora 28 update for chromium