Red Hat Security Advisory

RHSA-2020:3654

libcroco security update

Released 2020-09-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2020-10193 CVE-2020-12825 · GHSA-23x2-xqxm-pxwj

LOW 36

libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.02319 Published 2020-05-12 Partial fix CWE-674