CVE-2017-8834

Description

References

• lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html · Mailing List
• openwall.com/lists/oss-security/2020/08/13/3 · Exploit
• bugzilla.gnome.org/show_bug.cgi · Issue Tracking
• exploit-db.com/exploits/42147 · Exploit

libcroco 的其他漏洞

• CVE-2020-12825高危 7.1libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.
• CVE-2017-8871中危 6.5The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite …
• CVE-2017-7961高危 7.8The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" …
• CVE-2017-7960中危 5.5The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-ba…