VDB

GCVE-110-MAGEIA-2019-389

GCVE-110-MAGEIA-2019-389
Advisory Published
Vulnetix · Advisory published December 15, 2019
Updated libcroco packages fix security vulnerabilities: Heap overflow (input: check end of input before reading a byte) (CVE-2017-7960). Undefined behavior (tknzr: support only max long rgb values) (CVE-2017-7961). Denial of service (memory allocation error) via a crafted CSS file (CVE-2017-8834). Denial of service (infinite loop and CPU consumption) via a crafted CSS file (CVE-2017-8871).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageialibcroco0 (affected), 0.6.13-1.1.mga7 (unaffected)—

Aliases

CVE-2017-7960CVE-2017-7961CVE-2017-8834CVE-2017-8871

References

Updated libcroco packages fix security vulnerability
advisory
Updated libcroco packages fix security vulnerability
issue
Updated libcroco packages fix security vulnerability
issue

Browse GCVE Records

73,685 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›