Red Hat Security AdvisoryRHSA-2017:1793
graphite2 security update
Released 2017-07-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) graphite2-1.3.10-1.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) graphite2-devel-1.3.10-1.el7_3
- Red Hat Enterprise Linux ComputeNode (v. 7) graphite2-1.3.10-1.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) graphite2-devel-1.3.10-1.el7_3
- Red Hat Enterprise Linux Server (v. 7) graphite2-1.3.10-1.el7_3, graphite2-1.3.10-1.el7_3.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) graphite2-devel-1.3.10-1.el7_3, graphite2-devel-1.3.10-1.el7_3.ppc
- Red Hat Enterprise Linux Workstation (v. 7) graphite2-1.3.10-1.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 7) graphite2-devel-1.3.10-1.el7_3
Fixes 7 records
Priority MEDIUM 50
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05047 · Published 2018-06-11 · Fixed in 54, 52.2 CWE-119
Priority MEDIUM 42
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01419 · Published 2019-04-12 · Fixed CWE-125
Priority MEDIUM 41
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01418 · Published 2019-04-12 · Fixed CWE-119
Priority MEDIUM 41
Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01418 · Published 2019-04-12 · Fixed CWE-119
Priority MEDIUM 40
Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01199 · Published 2019-04-12 · Fixed CWE-119
Priority MEDIUM 40
Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.
CVSS 3.0HIGH 8.1· Network · No auth · User interaction · EPSS 0.02767 · Published 2019-04-12 · Fixed CWE-125
Priority LOW 38
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.
CVSS 3.0HIGH 8.1· Network · No auth · User interaction · EPSS 0.01186 · Published 2019-04-12 · Fixed CWE-125
THREATIST.IORead the docs