CVE-2017-8871 PUBLISHED

The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted CSS file.

EPSS 1.94% · 83.3th percentile

Risk Scores

EPSS Score
1.94%
83.3th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSlibcroco0, 0.6.12-2, 0.6.12-1
Ubuntu:Pro:14.04:LTSlibcroco0.6.8-2, 0.6.8-2ubuntu1, 0
Ubuntu:20.04:LTSlibcroco0.6.13-1, 0
Ubuntu:Pro:16.04:LTSlibcroco0.6.10-1, 0.6.9-1, 0.6.8-3

Timeline

References

Open in Interactive Console →