CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
Confidence
Low
software: cairo 1.16.0
WASP: ROSA-CHROME
package_evr_string: cairo-1.16.0-5
CVE-ID: CVE-2019-6461
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC.: There is an assertion problem in the _cairo_arc_in_direction function in the cairo-arc.c file.
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update cairo
CVE-ID: CVE-2019-6462
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC.: There is an infinite loop in the _arc_error_normalized function in cairo-arc.c associated with _arc_max_angle_for_tolerance_normalized.
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update cairo
CVE-ID: CVE-2018-19876
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC.: cairo 1.16.0 in cairo_ft_apply_variations() in cairo-ft_apply_variations() in cairo-ft-font.c freed memory using a free function incompatible with WebKit’s fastMalloc, causing the application to crash with the error “free(): invalid pointer”.
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update cairo
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
Confidence
Low