CVE-2017-9814 cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.
HighCVSS 7.5
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/cairo(Ubuntu:22.04) | < 1.16.0-5ubuntu2.1 | 1.16.0-5ubuntu2.1 |
| debian/cairo(Debian:12) | < 1.16.0-1 | 1.16.0-1 |
| debian/cairo(Debian:13) | < 1.16.0-1 | 1.16.0-1 |
| debian/cairo(Debian:14) | < 1.16.0-1 | 1.16.0-1 |
| cairographics cairo | <= 1.15.6 | No fix listed |
| openSUSE leap | = 15.1 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-5407-1 vendor-advisory
- USN-8140-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2017-9814 vendor-advisory
- openSUSE-SU-2020:1003 mailing-list third-party-advisory vendor-advisory
- bugs.freedesktop.org exploit issue-tracking third-party-advisory
- [mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar mailing-list
- GLSA-201904-01 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking