Lucene search
Cloud FoundryCFOUNDRY:C7F45C70F6C0B1158EC8D8729409B754HistorySep 21, 2017 - 12:00 a.m.
USN-3398-1: graphite2 vulnerabilities | Cloud Foundry
2017-09-2100:00:00
Cloud Foundry
www.cloudfoundry.org
38
0.008 Low
EPSS
Percentile
81.7%
Severity
Medium
Vendor
Canonical Ubuntu
Versions Affected
- Canonical Ubuntu 14.04
Description
Holger Fuhrmannek and Tyson Smith discovered that graphite2 incorrectly handled certain malformed fonts. If a user or automated system were tricked into opening a specially-crafted font file, a remote attacker could use this issue to cause graphite2 to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Cloud Foundry Products and Versions
Severity is medium unless otherwise noted.
- All versions of Cloud Foundry cflinuxfs2 prior to 1.150.0
Mitigation
OSS users are strongly encouraged to follow one of the mitigations below:
- The Cloud Foundry project recommends that Cloud Foundry deployments run with cflinuxfs2 version 1.150.0 or later.
References
Related
ubuntu
ubuntu
graphite2 vulnerabilities
2017-08-21 00:00:00
Thunderbird vulnerabilities
2017-07-05 00:00:00
Firefox vulnerabilities
2017-06-15 00:00:00
amazon
amazon
Important: graphite2
2017-08-17 18:27:00
openvas
openvas
Debian Security Advisory DSA 3894-1 (graphite2 - security update)
2017-06-22 00:00:00
CentOS Update for graphite2 CESA-2017:1793 centos7
2017-07-22 00:00:00
RedHat Update for graphite2 RHSA-2017:1793-01
2017-07-21 00:00:00
ibm
ibm
oraclelinux
oraclelinux
graphite2 security update
2017-07-20 00:00:00
thunderbird security update
2017-06-21 00:00:00
firefox security update
2017-06-14 00:00:00
debian
debian
[SECURITY] [DLA 1013-1] graphite2 security update
2017-07-05 12:16:36
[SECURITY] [DSA 3894-1] graphite2 security update
2017-06-22 17:43:51
[SECURITY] [DLA 1007-1] icedove/thunderbird security update
2017-07-03 05:57:05
redhat
redhat
(RHSA-2017:1793) Important: graphite2 security update
2017-07-20 22:22:08
(RHSA-2017:1561) Important: thunderbird security update
2017-06-21 03:10:17
(RHSA-2017:1440) Critical: firefox security update
2017-06-14 05:21:03
nessus
nessus
Debian DSA-3894-1 : graphite2 - security update
2017-06-23 00:00:00
Debian DLA-1013-1 : graphite2 security update
2017-07-06 00:00:00
Scientific Linux Security Update : graphite2 on SL7.x x86_64 (20170721)
2017-07-24 00:00:00
centos
centos
graphite2 security update
2017-07-21 14:21:22
thunderbird security update
2017-06-21 15:49:22
firefox security update
2017-06-15 10:14:10
gentoo
gentoo
Graphite: Multiple vulnerabilities
2017-10-13 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2018-02-20 00:00:00
osv
osv
graphite2 - security update
2017-06-22 00:00:00
graphite2 - security update
2017-07-05 00:00:00
firefox-esr - security update
2017-06-18 00:00:00
mageia
mageia
Updated graphite2 packages fix security vulnerabilities
2017-07-26 01:07:12
Updated firefox packages fix security vulnerabilities
2017-06-19 10:44:03
Updated thunderbird packages fix security vulnerability and bugs
2017-06-19 10:44:03
redhatcve
redhatcve
archlinux
archlinux
[ASA-201706-20] thunderbird: multiple issues
2017-06-16 00:00:00
[ASA-201706-19] firefox: multiple issues
2017-06-16 00:00:00
kaspersky
kaspersky
KLA11050 Multiple vulnerabilities in Mozilla Thunderbird
2017-06-14 00:00:00
KLA11044 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR
2017-06-13 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 52.2 — Mozilla
2017-06-14 00:00:00
Security vulnerabilities fixed in Firefox ESR 52.2 — Mozilla
2017-06-13 00:00:00
Security vulnerabilities fixed in Firefox 54 — Mozilla
2017-06-13 00:00:00
suse
suse
Security update for Mozilla based packages (important)
2017-06-20 00:09:32
Security update for MozillaFirefox, MozillaFirefox-branding-SLE (important)
2017-06-26 12:10:28
cve
cve
cvelist
cvelist
prion
prion
Heap overflow
2019-04-15 12:31:00
Heap overflow
2019-04-12 18:29:00
Cross site scripting
2019-04-15 12:31:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:12:46
Out Of Bound Reads (OOB)
2019-05-02 06:12:47
Out-of-bounds Read
2019-05-02 06:12:47
nvd
nvd
fedora
fedora
[SECURITY] Fedora 26 Update: graphite2-1.3.10-1.fc26
2017-06-25 16:22:37
[SECURITY] Fedora 25 Update: graphite2-1.3.10-1.fc25
2017-06-28 20:53:50
[SECURITY] Fedora 24 Update: graphite2-1.3.10-1.fc24
2017-07-12 01:54:12
ubuntucve
ubuntucve
debiancve
debiancve
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 52.2.0-alt1
2017-06-22 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 52.2.0-alt1
2017-06-21 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2017-06-13 00:00:00