FLAT-L6E05 – Vulnerability | Fluid Attacks Database

Database

Description

denial of service

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
rubygems	cairo	=1.15.4 \|\| >=1.15.4 <1.15.5	1.15.5
debian 12	cairo	=1.16.0-7 \|\| =1.17.8-1 \|\| =1.17.8-2 \|\| =1.17.8-3 \|\| =1.18.0-1 \|\| =1.18.0-1~hurd.1 \|\| =1.18.0-2 \|\| =1.18.0-3 \|\| =1.18.2-1 \|\| =1.18.2-2 \|\| =1.18.4-1 \|\| =1.18.4-2 \|\| =1.18.4-3	-
debian 11	cairo	=1.16.0-5 \|\| =1.16.0-6 \|\| =1.16.0-7 \|\| =1.17.8-1 \|\| =1.17.8-2 \|\| =1.17.8-3 \|\| =1.18.0-1 \|\| =1.18.0-1~hurd.1 \|\| =1.18.0-2 \|\| =1.18.0-3 \|\| =1.18.2-1 \|\| =1.18.2-2 \|\| =1.18.4-1 \|\| =1.18.4-2 \|\| =1.18.4-3	-
debian 14	cairo	=1.18.4-1 \|\| =1.18.4-2 \|\| =1.18.4-3	-
debian 13	cairo	=1.18.4-1 \|\| =1.18.4-2 \|\| =1.18.4-3	-
rpm rhel6	cairo	-	-
rpm rhel5	cairo	-	-
rpm rhel7	cairo	-	-
alpm rolling_release	cairo	>=1.14.10-1 <1.15.8-1	1.15.8-1

Aliases

1. CVE-2017-74752. NVD-2017-74753. OSV-2017-74754. OSV-DEBIAN-2017-74755. GCVE-2017-74756. SECURITY-TRACKER-CVE-2017-7475

References

1. https://bugs.freedesktop.org/show_bug.cgi?id=1007632. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-74753. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cairo/CVE-2017-7475.yml4. https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E5. http://seclists.org/oss-sec/2017/q2/151