CVE-2018-5128 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-5128 Interim 1 18 2025-11-05T03:37:23Z current 2021-05-30T14:09:05Z 2025-11-05T03:37:23Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-5128 A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operations. This results in a potentially exploitable crash. This vulnerability affects Firefox < 59. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V/ E-Mail link for openSUSE-SU-2024:14572-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0 openSUSE Leap 15.0 openSUSE Tumbleweed MozillaFirefox MozillaFirefox-60.0-lp150.2.2 MozillaFirefox-92.0-1.2 MozillaFirefox-branding-upstream-92.0-1.2 MozillaFirefox-devel MozillaFirefox-devel-92.0-1.2 MozillaFirefox-translations-common MozillaFirefox-translations-common-60.0-lp150.2.2 MozillaFirefox-translations-common-92.0-1.2 MozillaFirefox-translations-other MozillaFirefox-translations-other-60.0-lp150.2.2 MozillaFirefox-translations-other-92.0-1.2 firefox-esr-128.5.1-1.1 firefox-esr-branding-upstream-128.5.1-1.1 firefox-esr-translations-common-128.5.1-1.1 firefox-esr-translations-other-128.5.1-1.1 MozillaFirefox-60.0-lp150.2.2 as a component of openSUSE Leap 15.0 MozillaFirefox-translations-common-60.0-lp150.2.2 as a component of openSUSE Leap 15.0 MozillaFirefox-translations-other-60.0-lp150.2.2 as a component of openSUSE Leap 15.0 MozillaFirefox-92.0-1.2 as a component of openSUSE Tumbleweed MozillaFirefox-branding-upstream-92.0-1.2 as a component of openSUSE Tumbleweed MozillaFirefox-devel-92.0-1.2 as a component of openSUSE Tumbleweed MozillaFirefox-translations-common-92.0-1.2 as a component of openSUSE Tumbleweed MozillaFirefox-translations-other-92.0-1.2 as a component of openSUSE Tumbleweed firefox-esr-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-branding-upstream-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-common-128.5.1-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-other-128.5.1-1.1 as a component of openSUSE Tumbleweed MozillaFirefox as a component of SUSE CaaS Platform 4.0 MozillaFirefox-devel as a component of SUSE CaaS Platform 4.0 MozillaFirefox-translations-common as a component of SUSE CaaS Platform 4.0 MozillaFirefox-translations-other as a component of SUSE CaaS Platform 4.0 MozillaFirefox as a component of SUSE Enterprise Storage 6 MozillaFirefox as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS MozillaFirefox as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 11 SP4 LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP1-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP1-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP1-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15-ESPOS MozillaFirefox as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 15 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server for SAP Applications 15 MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 MozillaFirefox as a component of SUSE Manager Proxy 4.0 MozillaFirefox as a component of SUSE Manager Retail Branch Server 4.0 MozillaFirefox as a component of SUSE Manager Server 4.0 A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operations. This results in a potentially exploitable crash. This vulnerability affects Firefox < 59. CVE-2018-5128 openSUSE Leap 15.0:MozillaFirefox-60.0-lp150.2.2 openSUSE Leap 15.0:MozillaFirefox-translations-common-60.0-lp150.2.2 openSUSE Leap 15.0:MozillaFirefox-translations-other-60.0-lp150.2.2 openSUSE Tumbleweed:MozillaFirefox-92.0-1.2 openSUSE Tumbleweed:MozillaFirefox-branding-upstream-92.0-1.2 openSUSE Tumbleweed:MozillaFirefox-devel-92.0-1.2 openSUSE Tumbleweed:MozillaFirefox-translations-common-92.0-1.2 openSUSE Tumbleweed:MozillaFirefox-translations-other-92.0-1.2 openSUSE Tumbleweed:firefox-esr-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-branding-upstream-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-translations-common-128.5.1-1.1 openSUSE Tumbleweed:firefox-esr-translations-other-128.5.1-1.1 SUSE CaaS Platform 4.0:MozillaFirefox SUSE CaaS Platform 4.0:MozillaFirefox-devel SUSE CaaS Platform 4.0:MozillaFirefox-translations-common SUSE CaaS Platform 4.0:MozillaFirefox-translations-other SUSE Enterprise Storage 6:MozillaFirefox SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-other SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise High Performance Computing 15-LTSS:MozillaFirefox-translations-other SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-devel SUSE Linux Enterprise Server 12 SP1-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-devel SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-devel SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-other SUSE Linux Enterprise Server 15-ESPOS:MozillaFirefox SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-devel SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-other SUSE Linux Enterprise Server Business Critical Linux 15 SP1:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-common SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-other SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-devel SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-common SUSE Linux Enterprise Server for SAP Applications 15:MozillaFirefox-translations-other SUSE Manager Proxy 4.0:MozillaFirefox SUSE Manager Retail Branch Server 4.0:MozillaFirefox SUSE Manager Server 4.0:MozillaFirefox important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H