GitHub Advisoryadvisory · RubyGems
GHSA-5v3f-73gv-x7x5 cairo is vulnerable to denial of service due to a null pointer dereference
MEDIUM
Official page ↗
- Aliases
- CVE-2017-7475
- Ecosystem
- RubyGems
- Packages
- cairo
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-476
- Reviewed
- 2020-06-16
Affected packages
• RubyGems cairo: >= 1.15.4, < 1.15.5 → fixed in 1.15.5
Description
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the `FT_Load_Glyph` and `FT_Render_Glyph` resulting in an application crash.
Related
Alias · CVE (1)
- CVE-2017-7475 Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an… vulnerability
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-7475 advisory
- https://bugs.freedesktop.org/show_bug.cgi?id=100763 web
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475 web
- https://github.com/rcairo/rcairo package
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cairo/CVE-2017-7475.yml web
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E web
- http://seclists.org/oss-sec/2017/q2/151 web