Test ID:	1.3.6.1.4.1.25623.1.0.843582
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3705-1)
Summary:	The remote host is missing an update for the 'firefox' package(s) announced via the USN-3705-1 advisory.
Description:	Summary: The remote host is missing an update for the 'firefox' package(s) announced via the USN-3705-1 advisory. Vulnerability Insight: Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, read uninitialized memory, bypass same-origin restrictions, bypass CORS restrictions, bypass CSRF protections, obtain sensitive information, or execute arbitrary code. (CVE-2018-5156, CVE-2018-5186, CVE-2018-5187, CVE-2018-5188, CVE-2018-12358, CVE-2018-12359, CVE-2018-12360, CVE-2018-12361, CVE-2018-12362, CVE-2018-12363, CVE-2018-12364, CVE-2018-12365, CVE-2018-12366, CVE-2018-12367, CVE-2018-12370, CVE-2018-12371) A security issue was discovered with WebExtensions. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit this to obtain full browser permissions. (CVE-2018-12369) Affected Software/OS: 'firefox' package(s) on Ubuntu 14.04, Ubuntu 16.04, Ubuntu 17.10, Ubuntu 18.04. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-12358 https://security.gentoo.org/glsa/201810-01 http://www.securitytracker.com/id/1041193 https://usn.ubuntu.com/3705-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-12359 BugTraq ID: 104555 http://www.securityfocus.com/bid/104555 Debian Security Information: DSA-4235 (Google Search) https://www.debian.org/security/2018/dsa-4235 Debian Security Information: DSA-4244 (Google Search) https://www.debian.org/security/2018/dsa-4244 https://security.gentoo.org/glsa/201811-13 https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html RedHat Security Advisories: RHSA-2018:2112 https://access.redhat.com/errata/RHSA-2018:2112 RedHat Security Advisories: RHSA-2018:2113 https://access.redhat.com/errata/RHSA-2018:2113 RedHat Security Advisories: RHSA-2018:2251 https://access.redhat.com/errata/RHSA-2018:2251 RedHat Security Advisories: RHSA-2018:2252 https://access.redhat.com/errata/RHSA-2018:2252 https://usn.ubuntu.com/3714-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-12360 Common Vulnerability Exposure (CVE) ID: CVE-2018-12361 BugTraq ID: 104558 http://www.securityfocus.com/bid/104558 Debian Security Information: DSA-4295 (Google Search) https://www.debian.org/security/2018/dsa-4295 https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html Common Vulnerability Exposure (CVE) ID: CVE-2018-12362 BugTraq ID: 104560 http://www.securityfocus.com/bid/104560 Common Vulnerability Exposure (CVE) ID: CVE-2018-12363 Common Vulnerability Exposure (CVE) ID: CVE-2018-12364 Common Vulnerability Exposure (CVE) ID: CVE-2018-12365 Common Vulnerability Exposure (CVE) ID: CVE-2018-12366 Common Vulnerability Exposure (CVE) ID: CVE-2018-12367 BugTraq ID: 104561 http://www.securityfocus.com/bid/104561 Common Vulnerability Exposure (CVE) ID: CVE-2018-12369 Common Vulnerability Exposure (CVE) ID: CVE-2018-12370 Common Vulnerability Exposure (CVE) ID: CVE-2018-12371 https://bugzilla.mozilla.org/show_bug.cgi?id=1465686 https://www.mozilla.org/security/advisories/mfsa2018-15/ https://www.mozilla.org/security/advisories/mfsa2018-16/ https://www.mozilla.org/security/advisories/mfsa2018-19/ Common Vulnerability Exposure (CVE) ID: CVE-2018-5156 Common Vulnerability Exposure (CVE) ID: CVE-2018-5186 BugTraq ID: 104557 http://www.securityfocus.com/bid/104557 Common Vulnerability Exposure (CVE) ID: CVE-2018-5187 BugTraq ID: 104556 http://www.securityfocus.com/bid/104556 Common Vulnerability Exposure (CVE) ID: CVE-2018-5188 https://usn.ubuntu.com/3749-1/
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.