CVE-2019-6462

Опубликовано: 16 янв. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related to _arc_max_angle_for_tolerance_normalized.

Ссылки

https://github.com/TeamSeri0us/pocs/tree/master/gerbv
Not Applicable
Third Party Advisory
https://gitlab.freedesktop.org/cairo/cairo/issues/353
Third Party Advisory
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
https://github.com/TeamSeri0us/pocs/tree/master/gerbv
Not Applicable
Third Party Advisory
https://gitlab.freedesktop.org/cairo/cairo/issues/353
Third Party Advisory
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cairographics:cairo:1.16.0:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.02142

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVE-2019-6462

CVSS3: 6.5

ubuntu

больше 7 лет назад

An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related to _arc_max_angle_for_tolerance_normalized.

CVE-2019-6462

CVSS3: 6.5

redhat

больше 7 лет назад

An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related to _arc_max_angle_for_tolerance_normalized.

CVE-2019-6462

CVSS3: 6.5

msrc

почти 6 лет назад

Описание отсутствует

CVE-2019-6462

CVSS3: 6.5

debian

больше 7 лет назад

An issue was discovered in cairo 1.16.0. There is an infinite loop in ...

SUSE-SU-2024:1704-1

suse-cvrf

около 2 лет назад

Security update for cairo

EPSS

Процентиль: 80%

0.02142

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835