CVE-2017-8834 PUBLISHED

The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (memory allocation error) via a crafted CSS file.

EPSS 1.08% · 77.7th percentile

Risk Scores

EPSS Score
1.08%
77.7th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSlibcroco0.6.13-1, 0
Ubuntu:Pro:14.04:LTSlibcroco0.6.8-2ubuntu1, 0, 0.6.8-2
Ubuntu:Pro:18.04:LTSlibcroco0.6.12-2, 0, 0.6.12-1
Ubuntu:Pro:16.04:LTSlibcroco0.6.8-3, 0.6.9-1, 0

Timeline

References

Open in Interactive Console →