Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2017-7773HistoryApr 15, 2019 - 12:31 p.m.
CVE-2017-7773
2019-04-1512:31:08
Debian Security Bug Tracker
security-tracker.debian.org
11
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
71.7%
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 54.0-1 | firefox_54.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 52.2.0esr-1 | firefox-esr_52.2.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 52.2.0esr-1 | firefox-esr_52.2.0esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 52.2.0esr-1 | firefox-esr_52.2.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 52.2.0esr-1 | firefox-esr_52.2.0esr-1_all.deb |
| Debian | 12 | all | graphite2 | < 1.3.10-1 | graphite2_1.3.10-1_all.deb |
| Debian | 11 | all | graphite2 | < 1.3.10-1 | graphite2_1.3.10-1_all.deb |
| Debian | 999 | all | graphite2 | < 1.3.10-1 | graphite2_1.3.10-1_all.deb |
| Debian | 13 | all | graphite2 | < 1.3.10-1 | graphite2_1.3.10-1_all.deb |
Related
nvd
nvd
CVE-2017-7773
2019-04-15 12:31:08
prion
prion
Heap overflow
2019-04-15 12:31:00
osv
osv
CVE-2017-7773
2019-04-15 12:31:08
graphite2 - security update
2017-06-22 00:00:00
graphite2 - security update
2017-07-05 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:12:46
cvelist
cvelist
CVE-2017-7773
2019-04-12 19:31:23
cve
cve
CVE-2017-7773
2019-04-15 12:31:08
ubuntucve
ubuntucve
CVE-2017-7773
2017-06-14 00:00:00
redhatcve
redhatcve
CVE-2017-7773
2019-10-11 16:59:26
nessus
nessus
GLSA-201710-13 : Graphite: Multiple vulnerabilities
2017-10-16 00:00:00
Virtuozzo 7 : graphite2 / graphite2-devel (VZLSA-2017-1793)
2017-11-16 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : graphite2 vulnerabilities (USN-3398-1)
2017-08-22 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1013-1)
2018-02-04 00:00:00
Debian: Security Advisory (DSA-3894-1)
2017-06-21 00:00:00
CentOS Update for graphite2 CESA-2017:1793 centos7
2017-07-22 00:00:00
oraclelinux
oraclelinux
graphite2 security update
2017-07-20 00:00:00
thunderbird security update
2017-06-21 00:00:00
firefox security update
2017-06-14 00:00:00
debian
debian
[SECURITY] [DLA 1013-1] graphite2 security update
2017-07-05 12:16:36
[SECURITY] [DSA 3894-1] graphite2 security update
2017-06-22 17:43:51
[SECURITY] [DLA 1007-1] icedove/thunderbird security update
2017-07-03 05:57:05
ibm
ibm
ubuntu
ubuntu
graphite2 vulnerabilities
2017-08-21 00:00:00
Thunderbird vulnerabilities
2017-07-05 00:00:00
Firefox vulnerabilities
2017-06-15 00:00:00
amazon
amazon
Important: graphite2
2017-08-17 18:27:00
centos
centos
graphite2 security update
2017-07-21 14:21:22
thunderbird security update
2017-06-21 15:49:22
firefox security update
2017-06-15 10:14:10
gentoo
gentoo
Graphite: Multiple vulnerabilities
2017-10-13 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2018-02-20 00:00:00
cloudfoundry
cloudfoundry
USN-3398-1: graphite2 vulnerabilities | Cloud Foundry
2017-09-21 00:00:00
redhat
redhat
(RHSA-2017:1793) Important: graphite2 security update
2017-07-20 22:22:08
(RHSA-2017:1561) Important: thunderbird security update
2017-06-21 03:10:17
(RHSA-2017:1440) Critical: firefox security update
2017-06-14 05:21:03
mageia
mageia
Updated graphite2 packages fix security vulnerabilities
2017-07-26 01:07:12
Updated firefox packages fix security vulnerabilities
2017-06-19 10:44:03
archlinux
archlinux
[ASA-201706-20] thunderbird: multiple issues
2017-06-16 00:00:00
[ASA-201706-19] firefox: multiple issues
2017-06-16 00:00:00
kaspersky
kaspersky
KLA11050 Multiple vulnerabilities in Mozilla Thunderbird
2017-06-14 00:00:00
KLA11044 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR
2017-06-13 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 52.2 — Mozilla
2017-06-14 00:00:00
Security vulnerabilities fixed in Firefox ESR 52.2 — Mozilla
2017-06-13 00:00:00
Security vulnerabilities fixed in Firefox 54 — Mozilla
2017-06-13 00:00:00
suse
suse
Security update for Mozilla based packages (important)
2017-06-20 00:09:32
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
71.7%
Related for DEBIANCVE:CVE-2017-7773