libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libcrocoUpgrade libcroco-devel | May 4, 2022 | May 12, 2020 |
| Alpine Linux | — | Upgrade libcroco | Sep 23, 2020 | May 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libcroco-develUpgrade libcrocoUpgrade libcroco-debuginfo | Oct 28, 2020 | May 12, 2020 |
| Centos_linux | — | Upgrade libcroco-debuginfoUpgrade libcrocoUpgrade libcroco-debugsourceUpgrade libcroco-devel | Sep 9, 2020 | May 12, 2020 |
| Gentoo Linux | — | Upgrade gnome-base/gnome-shell.Upgrade sys-devel/gettext.Upgrade dev-libs/libcroco. | Aug 22, 2022 | May 12, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libcroco | Nov 3, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libcroco | Sep 28, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libcroco | Sep 3, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libcroco | Jul 31, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libcroco | Feb 8, 2021 | May 12, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade text/gnu-gettext to version 0.20.1-11.4.26.0.1.75.2 on Solaris 11.4Upgrade library/libcroco to version 0.6.13-11.4.26.0.1.75.2 on Solaris 11.4 | Jan 19, 2021 | May 12, 2020 |
| Oracle_linux | — | Upgrade libcroco-develUpgrade libcroco | Sep 10, 2020 | May 12, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 12, 2020 |
| Redhat_linux | — | Upgrade libcrocoUpgrade libcroco-debugsourceUpgrade libcroco-debuginfoNo solution existsUpgrade libcroco-devel | Sep 9, 2020 | May 12, 2020 |
| Rocky_linux | — | Upgrade libcroco-debugsourceUpgrade libcrocoUpgrade libcroco-debuginfoUpgrade libcroco-devel | Mar 12, 2024 | May 12, 2020 |
| Suse | — | Upgrade libcroco-0_6-3-32bitUpgrade libcroco-develUpgrade libcrocoUpgrade libcroco-0_6-3 | Sep 17, 2021 | May 12, 2020 |
| Ubuntu | — | Upgrade libcroco-tools (Ubuntu Pro)Upgrade libcroco-toolsUpgrade libcroco3Upgrade libcroco3 (Ubuntu Pro) | Apr 27, 2022 | May 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub