VDB

ALINUX2-SA-2020%3A0159

ALINUX2-SA-2020%3A0159 PUBLISHED CVSS 7.099999904632568 HIGH

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2020-12825: libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.

Risk Scores

CVSS 3.1
7.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Affected Products

VendorProductVersions
Alibaba Cloudlibcroco

Timeline

  • Oct 13, 2020 CVE Published
  • Oct 13, 2020 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›