CVE-2017-8834: Buffer Overflow
Published Jun 12, 2017
·Updated
Last updated 13 August 2024
Other sources
The crtknzrparsecomment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (memory allocation error) via a crafted CSS file.
Affected Software
3 affected components
debian/libcroco
Gnome Libcroco=0.6.12
openSUSE Leap=42.3
Remediation
Patch Available
Event History
Jun 12, 2017
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Aug 13, 2024
Data Sourced
via Launchpad·04:44 PM
Description
Sep 14, 2024
Data Sourced
via Ubuntu·04:49 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-8834?
CVE-2017-8834 is classified as a denial of service vulnerability that can cause memory allocation errors.
2
How does CVE-2017-8834 affect users?
CVE-2017-8834 allows remote attackers to cause a denial of service by exploiting the vulnerability in libcroco when processing crafted CSS files.
3
How do I fix CVE-2017-8834?
To fix CVE-2017-8834, update libcroco to a patched version that addresses the vulnerability.
4
Which versions of libcroco are affected by CVE-2017-8834?
The vulnerable version is libcroco 0.6.12, as identified in CVE-2017-8834.
5
What is the impact of CVE-2017-8834 on system stability?
The impact of CVE-2017-8834 on system stability can lead to application crashes and service disruptions due to denial of service.