CVE-2017-8834

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html · Mailing List
• openwall.com/lists/oss-security/2020/08/13/3 · Exploit
• bugzilla.gnome.org/show_bug.cgi · Issue Tracking
• exploit-db.com/exploits/42147 · Exploit

libcroco のその他の脆弱性

• CVE-2020-12825高 7.1libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.
• CVE-2017-8871中 6.5The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite …
• CVE-2017-7961高 7.8The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" …
• CVE-2017-7960中 5.5The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-ba…