Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2017-7960

libcroco: Out-of-bounds read due to missing index check in cr-input.c

The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted CSS file.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Gnome
Products
Libcroco
CVE-2017-7961

libcroco: Undefined behavior issue in cr_tknzr_parse_rgb function

The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CSS file. NOTE: third-party analysis reports "This is not a security issue in my view. The conversion surely is truncating the double into a long value, but there is no impact as the value is one of the RGB components.

CVSS 3.1 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Gnome
Products
Libcroco
CVE-2017-8834

libcroco: Memory allocation failure in the cr_tknzr_parse_comment function

The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (memory allocation error) via a crafted CSS file.

CVSS 3.1 · 6.5 Medium EPSS 3.8% KEV · Not listed
Vendors
Gnome Opensuse
Products
Libcroco Leap
CVE-2017-8871

libcroco: Infinite loop in the cr_parser_parse_selector_core function

The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted CSS file.

CVSS 3.1 · 6.5 Medium EPSS 12.9% KEV · Not listed
Vendors
Gnome Opensuse
Products
Libcroco Leap
CVE-2020-12825

libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c

libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.

CVSS 3.1 · 7.1 High EPSS 2.3% KEV · Not listed
Vendors
Gnome Redhat
Products
Libcroco Enterprise Linux