NetSight
IP …
high8.8

CVE-2018-5130

When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered.

Impact

When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. This vulnerability affects Firefox ESR < 52.7 and Firefox < 59.

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Version 7.4
RedhatEnterprise Linux Server Eus
Versions 7.4, 7.5
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10
MozillaFirefox
before 52.7.0
before 59.0

Weakness classification

CWE-20

References