Home

CVE-2020-12825

Description

libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.

Risk Information

Base Score
7.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
EPSS Score
Exploitation Probability
3.705

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM Security Guardium 10.5Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.6Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.1Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.2Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.3Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.0Windows
(RHSA-2020:4072) libcroco security update libcroco-0.6.12-6.el7_9.i686.rpmLinux
(RHSA-2020:4072) libcroco security update libcroco-0.6.12-6.el7_9.x86_64.rpmLinux
(RHSA-2020:4072) libcroco security update libcroco-devel-0.6.12-6.el7_9.i686.rpmLinux
(RHSA-2020:4072) libcroco security update libcroco-devel-0.6.12-6.el7_9.x86_64.rpmLinux
(RHSA-2020:3654) libcroco security update libcroco-0.6.12-4.el8_2.1.i686.rpmLinux
(RHSA-2020:3654) libcroco security update libcroco-0.6.12-4.el8_2.1.x86_64.rpmLinux
(RHSA-2020:3654) libcroco security update libcroco-debugsource-0.6.12-4.el8_2.1.i686.rpmLinux
(RHSA-2020:3654) libcroco security update libcroco-debugsource-0.6.12-4.el8_2.1.x86_64.rpmLinux
Libcroco update (ELSA-2020-3654) libcroco-0.6.12-4.el8_2.1.x86_64.rpmLinux
Libcroco-devel update (ELSA-2020-3654) libcroco-devel-0.6.12-4.el8_2.1.x86_64.rpmLinux
Libcroco update (ELSA-2020-3654) libcroco-0.6.12-4.el8_2.1.i686.rpmLinux
Libcroco-devel update (ELSA-2020-3654) libcroco-devel-0.6.12-4.el8_2.1.i686.rpmLinux
(CESA-2020:3654) libcroco security update libcroco-0.6.12-4.el8_2.1.i686.rpmLinux
(CESA-2020:3654) libcroco security update libcroco-0.6.12-4.el8_2.1.x86_64.rpmLinux
(CESA-2020:4072) libcroco security update libcroco-0.6.12-6.el7_9.x86_64.rpmLinux
(CESA-2020:4072) libcroco security update libcroco-devel-0.6.12-6.el7_9.x86_64.rpmLinux
SUSE-SU-2022:2909-1(SUSE Linux Enterprise Server 12-SP5 ) libcroco-0_6-3-0.6.11-12.6.45.x86_64.rpmLinux
SUSE-SU-2022:2909-1(SUSE Linux Enterprise Server 12-SP5 ) libcroco-0_6-3-32bit-0.6.11-12.6.45.x86_64.rpmLinux
SUSE-SU-2022:2909-1(SUSE Linux Enterprise Server 12-SP5 ) libcroco-0_6-3-debuginfo-0.6.11-12.6.45.x86_64.rpmLinux
SUSE-SU-2022:2909-1(SUSE Linux Enterprise Server 12-SP5 ) libcroco-0_6-3-debuginfo-32bit-0.6.11-12.6.45.x86_64.rpmLinux
SUSE-SU-2022:2909-1(SUSE Linux Enterprise Server 12-SP5 ) libcroco-debuginfo-0.6.11-12.6.45.x86_64.rpmLinux
SUSE-SU-2022:2909-1(SUSE Linux Enterprise Server 12-SP5 ) libcroco-debugsource-0.6.11-12.6.45.x86_64.rpmLinux
(RHSA-2020:3654)Moderate: security update libcroco-debuginfo-0.6.12-4.el8_2.1.i686.rpmLinux
(RHSA-2020:3654)Moderate: security update libcroco-debuginfo-0.6.12-4.el8_2.1.x86_64.rpmLinux
(RHSA-2020:4072)Moderate: security update libcroco-debuginfo-0.6.12-6.el7_9.i686.rpmLinux
(RHSA-2020:4072)Moderate: security update libcroco-debuginfo-0.6.12-6.el7_9.x86_64.rpmLinux
libcroco security update (RLSA-2020:3654) libcroco-0.6.12-4.el8_2.1.i686.rpmLinux
libcroco security update (RLSA-2020:3654) libcroco-0.6.12-4.el8_2.1.x86_64.rpmLinux
libcroco Security Update (ALAS-2020-1521) libcroco-0.6.12-6.amzn2.i686.rpmLinux
libcroco Security Update (ALAS-2020-1521) libcroco-0.6.12-6.amzn2.x86_64.rpmLinux
libcroco Security Update (ALAS-2020-1521) libcroco-devel-0.6.12-6.amzn2.x86_64.rpmLinux
Cascading Style Sheet (CSS) parsing and manipulation toolkit (USN-6958-1) libcroco-tools_0.6.13-1ubuntu0.1_amd64.debLinux
Cascading Style Sheet (CSS) parsing and manipulation toolkit (USN-6958-1) libcroco-tools_0.6.13-1ubuntu0.1_i386.debLinux
Cascading Style Sheet (CSS) parsing and manipulation toolkit (USN-6958-1) libcroco3_0.6.13-1ubuntu0.1_amd64.debLinux
Cascading Style Sheet (CSS) parsing and manipulation toolkit (USN-6958-1) libcroco3_0.6.13-1ubuntu0.1_i386.debLinux
Moderate: libcroco security update libcroco-0.6.12-4.el8_2.1.i686.rpmLinux
Moderate: libcroco security update libcroco-0.6.12-4.el8_2.1.x86_64.rpmLinux
Uncontrolled Recursion Vulnerability (CVE-2020-12825)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234