PT-2020-6929 · Libcroco+9 · Libcroco+9
Alan Coopersmith
·
Published
2020-05-09
·
Updated
2026-04-17
·
CVE-2020-12825
CVSS v2.0
8.5
High
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
libcroco versions 0.6.13 and earlier
Description
The issue is related to the
cr parser parse any core function in the cr-parser.c component of the libcroco library, which is used for working with cascading style sheets (css2). It is associated with uncontrolled recursion. Exploitation of this issue may allow a remote attacker to compromise data integrity and cause a denial of service.Recommendations
For libcroco versions 0.6.13 and earlier, consider disabling the
cr parser parse any core function as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Uncontrolled Recursion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Libcroco