Ubuntu update for libcroco
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 4 |
| CVE-ID | CVE-2017-7960 CVE-2017-8834 CVE-2017-8871 CVE-2020-12825 |
| CWE-ID | CWE-125 CWE-119 CWE-399 CWE-400 |
| Exploitation vector | Network |
| Public exploit | Public exploit code for vulnerability #3 is available. |
| Vulnerable software Subscribe |
Ubuntu Operating systems & Components / Operating system libcroco3 (Ubuntu package) Operating systems & Components / Operating system package or component libcroco-tools (Ubuntu package) Operating systems & Components / Operating system package or component |
| Vendor | Canonical Ltd. |
Security Bulletin
This security bulletin contains information about 4 vulnerabilities.
1) Out-of-bounds read
EUVDB-ID: #VU27952
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2017-7960
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error in the cr_input_new_from_uri function in cr-input.c in libcroco. A remote attacker can perform a denial of service (heap-based buffer over-read) via a crafted CSS file.
MitigationUpdate the affected package libcroco to the latest version.
Vulnerable software versionsUbuntu: 16.04
libcroco3 (Ubuntu package): before 0.6.111u buntu0.1~esm1
libcroco-tools (Ubuntu package): before 0.6.111u buntu0.1~esm1
External linkshttp://ubuntu.com/security/notices/USN-5389-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Buffer overflow
EUVDB-ID: #VU19192
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2017-8834
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error in the "cr_tknzr_parse_comment" function, as defined in the "src/cr-tknzr.c" file. A remote attacker can persuade a user to access a CSS file that submits malicious input to the system, trigger memory corruption and cause a DoS condition on the affected system.
MitigationUpdate the affected package libcroco to the latest version.
Vulnerable software versionsUbuntu: 16.04
libcroco3 (Ubuntu package): before 0.6.111u buntu0.1~esm1
libcroco-tools (Ubuntu package): before 0.6.111u buntu0.1~esm1
External linkshttp://ubuntu.com/security/notices/USN-5389-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Resource management error
EUVDB-ID: #VU19191
Risk: Medium
CVSSv3.1: 5.9 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2017-8871
CWE-ID:
CWE-399 - Resource Management Errors
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to infinite loop and CPU consumption in the "cr_parser_parse_selector_core" function, as defined in the "src/cr-parser.c" file . A remote attacker can persuade a user to access a file that submits malicious input to the system and cause a DoS condition.
MitigationUpdate the affected package libcroco to the latest version.
Vulnerable software versionsUbuntu: 16.04
libcroco3 (Ubuntu package): before 0.6.111u buntu0.1~esm1
libcroco-tools (Ubuntu package): before 0.6.111u buntu0.1~esm1
External linkshttp://ubuntu.com/security/notices/USN-5389-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
4) Resource exhaustion
EUVDB-ID: #VU27951
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-12825
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources caused by excessive recursion in cr_parser_parse_any_core in cr-parser.c. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.
MitigationUpdate the affected package libcroco to the latest version.
Vulnerable software versionsUbuntu: 16.04
libcroco3 (Ubuntu package): before 0.6.111u buntu0.1~esm1
libcroco-tools (Ubuntu package): before 0.6.111u buntu0.1~esm1
External linkshttp://ubuntu.com/security/notices/USN-5389-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
