CVE-2018-18064 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-18064 Interim 1 63 2025-05-17T23:27:57Z current 2021-05-30T14:17:41Z 2025-05-17T23:27:57Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-18064 cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES for SAP Applications 11 SP3 SUSE CaaS Platform 4.5 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Package Hub 15 SP3 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 cairo cairo-32bit cairo-devel cairo-devel-32bit cairo-doc cairo-x86 libcairo-gobject2 libcairo-gobject2-32bit libcairo-script-interpreter2 libcairo2 libcairo2-32bit cairo as a component of SLES for SAP Applications 11 SP3 cairo as a component of SUSE CaaS Platform 4.5 cairo as a component of SUSE Enterprise Storage 7 cairo-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libcairo-gobject2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libcairo-script-interpreter2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libcairo2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libcairo2-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS cairo as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS cairo-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libcairo-gobject2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libcairo-script-interpreter2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libcairo2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libcairo2-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS cairo as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS cairo-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libcairo-gobject2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libcairo-script-interpreter2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libcairo2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libcairo2-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS cairo as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libcairo2 as a component of SUSE Linux Enterprise Micro 5.0 cairo as a component of SUSE Linux Enterprise Micro 5.0 libcairo-gobject2 as a component of SUSE Linux Enterprise Micro 5.2 libcairo2 as a component of SUSE Linux Enterprise Micro 5.2 cairo as a component of SUSE Linux Enterprise Micro 5.2 cairo-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libcairo-gobject2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libcairo2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 cairo as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 cairo-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libcairo-gobject2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libcairo2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 cairo as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libcairo2-32bit as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 cairo as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libcairo2-32bit as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 cairo as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libcairo2-32bit as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 cairo as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 cairo-devel as a component of SUSE Linux Enterprise Real Time 15 SP2 libcairo-gobject2 as a component of SUSE Linux Enterprise Real Time 15 SP2 libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Real Time 15 SP2 libcairo2 as a component of SUSE Linux Enterprise Real Time 15 SP2 libcairo2-32bit as a component of SUSE Linux Enterprise Real Time 15 SP2 cairo as a component of SUSE Linux Enterprise Real Time 15 SP2 cairo as a component of SUSE Linux Enterprise Server 11 SP1 cairo as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata cairo as a component of SUSE Linux Enterprise Server 11 SP3 cairo-32bit as a component of SUSE Linux Enterprise Server 11 SP3 cairo-doc as a component of SUSE Linux Enterprise Server 11 SP3 cairo-x86 as a component of SUSE Linux Enterprise Server 11 SP3 cairo as a component of SUSE Linux Enterprise Server 11 SP3 LTSS cairo as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata cairo as a component of SUSE Linux Enterprise Server 11 SP4-LTSS cairo-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS cairo-doc as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libcairo-gobject2 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libcairo2 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libcairo2-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS cairo as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libcairo-gobject2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libcairo2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libcairo2-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL cairo as a component of SUSE Linux Enterprise Server 12 SP2-BCL libcairo-gobject2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Server 12 SP3-BCL libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libcairo2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libcairo2-32bit as a component of SUSE Linux Enterprise Server 12 SP3-BCL cairo as a component of SUSE Linux Enterprise Server 12 SP3-BCL libcairo-gobject2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcairo2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcairo2-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS cairo as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcairo-gobject2 as a component of SUSE Linux Enterprise Server 12-LTSS libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Server 12-LTSS libcairo2 as a component of SUSE Linux Enterprise Server 12-LTSS libcairo2-32bit as a component of SUSE Linux Enterprise Server 12-LTSS cairo as a component of SUSE Linux Enterprise Server 12-LTSS cairo-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcairo-gobject2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcairo2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcairo2-32bit as a component of SUSE Linux Enterprise Server 15 SP2-LTSS cairo as a component of SUSE Linux Enterprise Server 15 SP2-LTSS cairo as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 cairo as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 cairo as a component of SUSE Linux Enterprise Server Teradata 12 SP3 cairo as a component of SUSE Linux Enterprise Server for SAP Applications 12 cairo-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libcairo-gobject2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libcairo2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libcairo2-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 cairo as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 cairo-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 cairo-devel-32bit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 cairo-doc as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 cairo as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 cairo as a component of SUSE Manager Proxy 4.1 cairo as a component of SUSE Manager Retail Branch Server 4.1 cairo as a component of SUSE Manager Server 4.1 cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function). CVE-2018-18064 SLES for SAP Applications 11 SP3:cairo SUSE CaaS Platform 4.5:cairo SUSE Enterprise Storage 7:cairo SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:cairo SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:cairo-devel SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libcairo-gobject2 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libcairo-script-interpreter2 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libcairo2 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libcairo2-32bit SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:cairo SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:cairo-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libcairo-gobject2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libcairo-script-interpreter2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libcairo2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libcairo2-32bit SUSE Linux Enterprise Micro 5.0:cairo SUSE Linux Enterprise Micro 5.0:libcairo2 SUSE Linux Enterprise Micro 5.2:cairo SUSE Linux Enterprise Micro 5.2:libcairo-gobject2 SUSE Linux Enterprise Micro 5.2:libcairo2 SUSE Linux Enterprise Module for Basesystem 15 SP3:cairo SUSE Linux Enterprise Module for Basesystem 15 SP3:cairo-devel SUSE Linux Enterprise Module for Basesystem 15 SP3:libcairo-gobject2 SUSE Linux Enterprise Module for Basesystem 15 SP3:libcairo-script-interpreter2 SUSE Linux Enterprise Module for Basesystem 15 SP3:libcairo2 SUSE Linux Enterprise Module for Basesystem 15 SP4:cairo SUSE Linux Enterprise Module for Basesystem 15 SP4:cairo-devel SUSE Linux Enterprise Module for Basesystem 15 SP4:libcairo-gobject2 SUSE Linux Enterprise Module for Basesystem 15 SP4:libcairo-script-interpreter2 SUSE Linux Enterprise Module for Basesystem 15 SP4:libcairo2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:cairo SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libcairo2-32bit SUSE Linux Enterprise Module for Desktop Applications 15 SP4:cairo SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libcairo2-32bit SUSE Linux Enterprise Module for Package Hub 15 SP3:cairo SUSE Linux Enterprise Module for Package Hub 15 SP3:libcairo2-32bit SUSE Linux Enterprise Real Time 15 SP2:cairo SUSE Linux Enterprise Real Time 15 SP2:cairo-devel SUSE Linux Enterprise Real Time 15 SP2:libcairo-gobject2 SUSE Linux Enterprise Real Time 15 SP2:libcairo-script-interpreter2 SUSE Linux Enterprise Real Time 15 SP2:libcairo2 SUSE Linux Enterprise Real Time 15 SP2:libcairo2-32bit SUSE Linux Enterprise Server 11 SP1 for Teradata:cairo SUSE Linux Enterprise Server 11 SP1:cairo SUSE Linux Enterprise Server 11 SP3 LTSS:cairo SUSE Linux Enterprise Server 11 SP3 for Teradata:cairo SUSE Linux Enterprise Server 11 SP3:cairo SUSE Linux Enterprise Server 11 SP3:cairo-32bit SUSE Linux Enterprise Server 11 SP3:cairo-doc SUSE Linux Enterprise Server 11 SP3:cairo-x86 SUSE Linux Enterprise Server 11 SP4-LTSS:cairo SUSE Linux Enterprise Server 11 SP4-LTSS:cairo-32bit SUSE Linux Enterprise Server 11 SP4-LTSS:cairo-doc SUSE Linux Enterprise Server 12 SP1-LTSS:cairo SUSE Linux Enterprise Server 12 SP1-LTSS:libcairo-gobject2 SUSE Linux Enterprise Server 12 SP1-LTSS:libcairo-gobject2-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:libcairo-script-interpreter2 SUSE Linux Enterprise Server 12 SP1-LTSS:libcairo2 SUSE Linux Enterprise Server 12 SP1-LTSS:libcairo2-32bit SUSE Linux Enterprise Server 12-LTSS:cairo SUSE Linux Enterprise Server 12-LTSS:libcairo-gobject2 SUSE Linux Enterprise Server 12-LTSS:libcairo-gobject2-32bit SUSE Linux Enterprise Server 12-LTSS:libcairo2 SUSE Linux Enterprise Server 12-LTSS:libcairo2-32bit SUSE Linux Enterprise Server 15 SP2-LTSS:cairo SUSE Linux Enterprise Server 15 SP2-LTSS:cairo-devel SUSE Linux Enterprise Server 15 SP2-LTSS:libcairo-gobject2 SUSE Linux Enterprise Server 15 SP2-LTSS:libcairo-script-interpreter2 SUSE Linux Enterprise Server 15 SP2-LTSS:libcairo2 SUSE Linux Enterprise Server 15 SP2-LTSS:libcairo2-32bit SUSE Linux Enterprise Server Business Critical Linux 15 SP2:cairo SUSE Linux Enterprise Server for SAP Applications 12:cairo SUSE Linux Enterprise Server for SAP Applications 15 SP2:cairo SUSE Linux Enterprise Server for SAP Applications 15 SP2:cairo-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:libcairo-gobject2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libcairo-script-interpreter2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libcairo2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libcairo2-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:cairo SUSE Linux Enterprise Software Development Kit 11 SP4:cairo-devel SUSE Linux Enterprise Software Development Kit 11 SP4:cairo-devel-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:cairo-doc SUSE Manager Proxy 4.1:cairo SUSE Manager Retail Branch Server 4.1:cairo SUSE Manager Server 4.1:cairo SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:cairo SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:cairo-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcairo-gobject2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcairo-script-interpreter2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcairo2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libcairo2-32bit SUSE Linux Enterprise Server 12 SP2-BCL:cairo SUSE Linux Enterprise Server 12 SP2-BCL:libcairo-gobject2 SUSE Linux Enterprise Server 12 SP2-BCL:libcairo-gobject2-32bit SUSE Linux Enterprise Server 12 SP2-BCL:libcairo-script-interpreter2 SUSE Linux Enterprise Server 12 SP2-BCL:libcairo2 SUSE Linux Enterprise Server 12 SP2-BCL:libcairo2-32bit SUSE Linux Enterprise Server 12 SP3-BCL:cairo SUSE Linux Enterprise Server 12 SP3-BCL:libcairo-gobject2 SUSE Linux Enterprise Server 12 SP3-BCL:libcairo-gobject2-32bit SUSE Linux Enterprise Server 12 SP3-BCL:libcairo-script-interpreter2 SUSE Linux Enterprise Server 12 SP3-BCL:libcairo2 SUSE Linux Enterprise Server 12 SP3-BCL:libcairo2-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:cairo SUSE Linux Enterprise Server 12 SP4-LTSS:libcairo-gobject2 SUSE Linux Enterprise Server 12 SP4-LTSS:libcairo-gobject2-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:libcairo-script-interpreter2 SUSE Linux Enterprise Server 12 SP4-LTSS:libcairo2 SUSE Linux Enterprise Server 12 SP4-LTSS:libcairo2-32bit SUSE Linux Enterprise Server Business Critical Linux 15 SP1:cairo SUSE Linux Enterprise Server Teradata 12 SP3:cairo important 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 7.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H