Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2017-7774HistoryApr 15, 2019 - 12:31 p.m.
CVE-2017-7774
2019-04-1512:31:08
Debian Security Bug Tracker
security-tracker.debian.org
28
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS
0.005
Percentile
75.3%
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 54.0-1 | firefox_54.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 52.2.0esr-1 | firefox-esr_52.2.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 52.2.0esr-1 | firefox-esr_52.2.0esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 52.2.0esr-1 | firefox-esr_52.2.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 52.2.0esr-1 | firefox-esr_52.2.0esr-1_all.deb |
| Debian | 12 | all | graphite2 | < 1.3.10-1 | graphite2_1.3.10-1_all.deb |
| Debian | 11 | all | graphite2 | < 1.3.10-1 | graphite2_1.3.10-1_all.deb |
| Debian | 999 | all | graphite2 | < 1.3.10-1 | graphite2_1.3.10-1_all.deb |
| Debian | 13 | all | graphite2 | < 1.3.10-1 | graphite2_1.3.10-1_all.deb |
Related
osv
osv
CVE-2017-7774
2019-04-15 12:31:08
graphite2 - security update
2017-07-05 00:00:00
graphite2 - security update
2017-06-22 00:00:00
nvd
nvd
CVE-2017-7774
2019-04-15 12:31:08
cvelist
cvelist
CVE-2017-7774
2019-04-12 19:32:43
cve
cve
CVE-2017-7774
2019-04-15 12:31:08
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:12:46
prion
prion
Cross site scripting
2019-04-15 12:31:00
ubuntucve
ubuntucve
CVE-2017-7774
2017-06-14 00:00:00
redhatcve
redhatcve
CVE-2017-7774
2017-06-14 04:53:38
openvas
openvas
Debian: Security Advisory (DSA-3894-1)
2017-06-21 00:00:00
Debian: Security Advisory (DLA-1013-1)
2018-02-04 00:00:00
Huawei EulerOS: Security Advisory for graphite2 (EulerOS-SA-2017-1153)
2020-01-23 00:00:00
nessus
nessus
Debian DLA-1013-1 : graphite2 security update
2017-07-06 00:00:00
Debian DSA-3894-1 : graphite2 - security update
2017-06-23 00:00:00
RHEL 7 : graphite2 (RHSA-2017:1793)
2017-07-21 00:00:00
centos
centos
graphite2 security update
2017-07-21 14:21:22
firefox security update
2017-06-15 10:14:10
thunderbird security update
2017-06-21 15:49:22
gentoo
gentoo
Graphite: Multiple vulnerabilities
2017-10-13 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2018-02-20 00:00:00
ubuntu
ubuntu
graphite2 vulnerabilities
2017-08-21 00:00:00
Thunderbird vulnerabilities
2017-07-05 00:00:00
Firefox vulnerabilities
2017-06-15 00:00:00
amazon
amazon
Important: graphite2
2017-08-17 18:27:00
redhat
redhat
(RHSA-2017:1793) Important: graphite2 security update
2017-07-20 22:22:08
(RHSA-2017:1440) Critical: firefox security update
2017-06-14 05:21:03
(RHSA-2017:1561) Important: thunderbird security update
2017-06-21 03:10:17
debian
debian
[SECURITY] [DSA 3894-1] graphite2 security update
2017-06-22 17:43:51
[SECURITY] [DLA 1013-1] graphite2 security update
2017-07-05 12:16:36
[SECURITY] [DSA 3918-1] icedove/thunderbird security update
2017-07-25 20:03:55
cloudfoundry
cloudfoundry
USN-3398-1: graphite2 vulnerabilities | Cloud Foundry
2017-09-21 00:00:00
ibm
ibm
oraclelinux
oraclelinux
graphite2 security update
2017-07-20 00:00:00
firefox security update
2017-06-14 00:00:00
thunderbird security update
2017-06-21 00:00:00
mageia
mageia
Updated graphite2 packages fix security vulnerabilities
2017-07-26 01:07:12
Updated firefox packages fix security vulnerabilities
2017-06-19 10:44:03
archlinux
archlinux
[ASA-201706-20] thunderbird: multiple issues
2017-06-16 00:00:00
[ASA-201706-19] firefox: multiple issues
2017-06-16 00:00:00
kaspersky
kaspersky
KLA11050 Multiple vulnerabilities in Mozilla Thunderbird
2017-06-14 00:00:00
KLA11044 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR
2017-06-13 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 52.2 — Mozilla
2017-06-14 00:00:00
Security vulnerabilities fixed in Firefox ESR 52.2 — Mozilla
2017-06-13 00:00:00
Security vulnerabilities fixed in Firefox 54 — Mozilla
2017-06-13 00:00:00
suse
suse
Security update for Mozilla based packages (important)
2017-06-20 00:09:32
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS
0.005
Percentile
75.3%
Related for DEBIANCVE:CVE-2017-7774