963 matches found
CVE-2021-21236
CairoSVG is a Python pypi package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service REDoS vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regula...
CVE-2021-21236
CVE-2021-21236 affects CairoSVG (Python) prior to 2.5.1, where two regular expressions enable a Regular Expression Denial of Service (REDoS) during SVG processing. An attacker could craft a malicious SVG to cause prolonged processing time, potentially impacting availability. The vulnerability is ...
DLA-2518-1 cairo - security update
Bulletin has no description...
Debian DLA-2518-1 : cairo security update
LibreOffice slideshow aborts with stack smashing in cairos compositeboxes. For Debian 9 stretch, this problem has been fixed in version 1.14.8-1+deb9u1. We recommend that you upgrade your cairo packages. For the detailed security status of cairo please refer to its security tracker page at:...
[SECURITY] [DLA 2518-1] cairo security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2518-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 06, 2021 https://wiki.debian.org/LTS -...
CVE-2020-35492
A flaw was found in cairo's image-compositor.c. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untrusted input to cause a stack buffer...
cairo Buffer Error Vulnerability
cairo is cairo open source a let used to provide vector graphics drawing free library . Provide in multiple contexts to do two-dimensional space drawing , advanced more can use hardware acceleration . cairo 1.17.4 before the version of the buffer error vulnerability , an attacker exploited the...
EulerOS 2.0 SP5 : cairo (EulerOS-SA-2020-2540)
According to the versions of the cairo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in cairo 1.16.0. There is an assertion problem in the function cairoarcindirection in the file cairo-arc.c.CVE-2019-6461 ...
Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2020-2540)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2020-6179
Name of the Vulnerable Software and Affected Versions cairo versions prior to 1.17.4 Description A flaw was found in cairo's image-compositor.c, allowing an attacker who can provide a crafted input file to cause a stack buffer overflow, resulting in an out-of-bounds WRITE. This can lead to...
CVE-2018-19876 affecting package cairo 1.16.0-5
CVE-2018-19876 affecting package cairo 1.16.0-5. A patched version of the package is available...
poppler:pdf_draw_fuzzer: Heap-buffer-overflow in _cairo_array_append_multiple
Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=4828401948688384 Project: poppler Fuzzing Engine: honggfuzz Fuzz Target:...
poppler:pdf_draw_fuzzer: Heap-buffer-overflow in cairo_cff_find_width_and_subroutines_used
Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5726597252120576 Project: poppler Fuzzing Engine: afl Fuzz Target:...
poppler:pdf_draw_fuzzer: Heap-buffer-overflow in _cairo_array_append_multiple
Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=6607282141659136 Project: poppler Fuzzing Engine: afl Fuzz Target:...
Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2020-2332)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP2 : cairo (EulerOS-SA-2020-2332)
According to the version of the cairo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in cairo 1.16.0. There is an infinite loop in the function arcerrornormalized in the file cairo-arc.c, related to...
Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2020-2057)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : cairo (EulerOS-SA-2020-2057)
According to the versions of the cairo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in cairo 1.16.0. There is an assertion problem in the function cairoarcindirection in the file cairo-arc.c.CVE-2019-6461 ...
USN-4541-1 gnuplot vulnerabilities
Tim Blazytko, Cornelius Aschermann, Sergej Schumilo and Nils Bars discovered that Gnuplot did not properly validate string sizes in the dfgenerateasciiarrayentry function. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service attack or arbitra...
Updated cairo packages fix security vulnerability
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FTLoadGlyph and FTRenderGlyph resulting in an application crash. CVE-2017-7475...