Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2017-7772HistoryApr 12, 2019 - 6:29 p.m.
CVE-2017-7772
2019-04-1218:29:00
Debian Security Bug Tracker
security-tracker.debian.org
21
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
71.7%
Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 54.0-1 | firefox_54.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 52.2.0esr-1 | firefox-esr_52.2.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 52.2.0esr-1 | firefox-esr_52.2.0esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 52.2.0esr-1 | firefox-esr_52.2.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 52.2.0esr-1 | firefox-esr_52.2.0esr-1_all.deb |
| Debian | 12 | all | graphite2 | < 1.3.10-1 | graphite2_1.3.10-1_all.deb |
| Debian | 11 | all | graphite2 | < 1.3.10-1 | graphite2_1.3.10-1_all.deb |
| Debian | 999 | all | graphite2 | < 1.3.10-1 | graphite2_1.3.10-1_all.deb |
| Debian | 13 | all | graphite2 | < 1.3.10-1 | graphite2_1.3.10-1_all.deb |
Related
cve
cve
CVE-2017-7772
2019-04-12 18:29:00
prion
prion
Heap overflow
2019-04-12 18:29:00
nvd
nvd
CVE-2017-7772
2019-04-12 18:29:00
cvelist
cvelist
CVE-2017-7772
2019-04-12 18:00:34
ubuntucve
ubuntucve
CVE-2017-7772
2017-06-14 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:12:46
osv
osv
CVE-2017-7772
2019-04-12 18:29:00
graphite2 - security update
2017-06-22 00:00:00
graphite2 - security update
2017-07-05 00:00:00
redhatcve
redhatcve
CVE-2017-7772
2017-06-14 04:52:24
openvas
openvas
Debian: Security Advisory (DSA-3894-1)
2017-06-21 00:00:00
Debian: Security Advisory (DLA-1013-1)
2018-02-04 00:00:00
Huawei EulerOS: Security Advisory for graphite2 (EulerOS-SA-2017-1153)
2020-01-23 00:00:00
nessus
nessus
Scientific Linux Security Update : graphite2 on SL7.x x86_64 (20170721)
2017-07-24 00:00:00
Amazon Linux AMI : graphite2 (ALAS-2017-872)
2017-08-18 00:00:00
Virtuozzo 7 : graphite2 / graphite2-devel (VZLSA-2017-1793)
2017-11-16 00:00:00
centos
centos
graphite2 security update
2017-07-21 14:21:22
firefox security update
2017-06-15 10:14:10
thunderbird security update
2017-06-21 15:49:22
gentoo
gentoo
Graphite: Multiple vulnerabilities
2017-10-13 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2018-02-20 00:00:00
ibm
ibm
oraclelinux
oraclelinux
graphite2 security update
2017-07-20 00:00:00
thunderbird security update
2017-06-21 00:00:00
firefox security update
2017-06-14 00:00:00
debian
debian
[SECURITY] [DLA 1013-1] graphite2 security update
2017-07-05 12:16:36
[SECURITY] [DSA 3894-1] graphite2 security update
2017-06-22 17:43:51
[SECURITY] [DSA 3918-1] icedove/thunderbird security update
2017-07-25 20:03:55
ubuntu
ubuntu
graphite2 vulnerabilities
2017-08-21 00:00:00
Thunderbird vulnerabilities
2017-07-05 00:00:00
Firefox vulnerabilities
2017-06-15 00:00:00
amazon
amazon
Important: graphite2
2017-08-17 18:27:00
cloudfoundry
cloudfoundry
USN-3398-1: graphite2 vulnerabilities | Cloud Foundry
2017-09-21 00:00:00
redhat
redhat
(RHSA-2017:1793) Important: graphite2 security update
2017-07-20 22:22:08
(RHSA-2017:1440) Critical: firefox security update
2017-06-14 05:21:03
(RHSA-2017:1561) Important: thunderbird security update
2017-06-21 03:10:17
mageia
mageia
Updated graphite2 packages fix security vulnerabilities
2017-07-26 01:07:12
Updated firefox packages fix security vulnerabilities
2017-06-19 10:44:03
archlinux
archlinux
[ASA-201706-20] thunderbird: multiple issues
2017-06-16 00:00:00
[ASA-201706-19] firefox: multiple issues
2017-06-16 00:00:00
kaspersky
kaspersky
KLA11050 Multiple vulnerabilities in Mozilla Thunderbird
2017-06-14 00:00:00
KLA11044 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR
2017-06-13 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 52.2 — Mozilla
2017-06-14 00:00:00
Security vulnerabilities fixed in Firefox ESR 52.2 — Mozilla
2017-06-13 00:00:00
Security vulnerabilities fixed in Firefox 54 — Mozilla
2017-06-13 00:00:00
suse
suse
Security update for Mozilla based packages (important)
2017-06-20 00:09:32
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
71.7%
Related for DEBIANCVE:CVE-2017-7772