libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libcroco-develUpgrade libcroco | May 4, 2022 | May 12, 2020 |
| Alpine Linux | — | Upgrade libcroco | Sep 23, 2020 | May 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libcroco-debuginfoUpgrade libcrocoUpgrade libcroco-devel | Oct 28, 2020 | May 12, 2020 |
| Centos_linux | — | Upgrade libcroco-debuginfoUpgrade libcrocoUpgrade libcroco-develUpgrade libcroco-debugsource | Sep 9, 2020 | May 12, 2020 |
| Gentoo Linux | — | Upgrade sys-devel/gettext.Upgrade dev-libs/libcroco.Upgrade gnome-base/gnome-shell. | Aug 22, 2022 | May 12, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libcroco | Nov 3, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libcroco | Sep 28, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libcroco | Sep 3, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libcroco | Jul 31, 2020 | May 12, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libcroco | Feb 8, 2021 | May 12, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade library/libcroco to version 0.6.13-11.4.26.0.1.75.2 on Solaris 11.4Upgrade text/gnu-gettext to version 0.20.1-11.4.26.0.1.75.2 on Solaris 11.4 | Jan 19, 2021 | May 12, 2020 |
| Oracle_linux | — | Upgrade libcrocoUpgrade libcroco-devel | Sep 10, 2020 | May 12, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 12, 2020 |
| Redhat_linux | — | Upgrade libcrocoUpgrade libcroco-debugsourceNo solution existsUpgrade libcroco-debuginfoUpgrade libcroco-devel | Sep 9, 2020 | May 12, 2020 |
| Rocky_linux | — | Upgrade libcrocoUpgrade libcroco-debuginfoUpgrade libcroco-debugsourceUpgrade libcroco-devel | Mar 12, 2024 | May 12, 2020 |
| Suse | — | Upgrade libcroco-develUpgrade libcroco-0_6-3-32bitUpgrade libcroco-0_6-3Upgrade libcroco | Sep 17, 2021 | May 12, 2020 |
| Ubuntu | — | Upgrade libcroco-tools (Ubuntu Pro)Upgrade libcroco-toolsUpgrade libcroco3Upgrade libcroco3 (Ubuntu Pro) | Apr 27, 2022 | May 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub