CVE-2018-18505

CRITICAL

Firefox < 65 and Thunderbird < 60.5 - Sandbox Escape via IPC Channel Authentication Bypass

Title source: llm
STIX 2.1

Description

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

References (18)

Core 18
Core References
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:0219
Vendor Advisory x_refsource_confirm
https://www.mozilla.org/security/advisories/mfsa2019-01/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3897-1/
Issue Tracking, Patch, Vendor Advisory x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=1087565
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/106781
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201903-04
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3874-1/
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:0269
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:0218
Vendor Advisory x_refsource_confirm
https://www.mozilla.org/security/advisories/mfsa2019-02/
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2019/dsa-4376
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/02/msg00024.html
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/01/msg00025.html
Vendor Advisory x_refsource_confirm
https://www.mozilla.org/security/advisories/mfsa2019-03/
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2019/dsa-4392
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:0270
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201904-07

Scores

CVSS v3 10.0
EPSS 0.0318
EPSS Percentile 87.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-287
Status published
Products (17)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 18.04
canonical/ubuntu_linux 18.10
debian/debian_linux 8.0
debian/debian_linux 9.0
mozilla/firefox < 60.5.0
mozilla/thunderbird < 60.5.0
redhat/enterprise_linux_desktop 6.0
redhat/enterprise_linux_desktop 7.0
... and 7 more
Published Feb 05, 2019
Tracked Since Feb 18, 2026