CVE-2017-7475
1 advisory.
RubyGems/cairo CVE-2017-7475: medium 5.5, EPSS 1.82%
cairo is vulnerable to denial of service due to a null pointer dereference
Action: Upgrade cairo to 1.15.5 or later.
bundle update cairoAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.15.4 | 1.15.5 | - |
Fixed versions
| 1.15.5 |
Sources
- osv: GHSA-5v3f-73gv-x7x5
- https://nvd.nist.gov/vuln/detail/CVE-2017-7475
- https://bugs.freedesktop.org/show_bug.cgi?id=100763
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475
- https://github.com/rcairo/rcairo
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cairo/CVE-2017-7475.yml
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
- http://seclists.org/oss-sec/2017/q2/151
CVE-2017-7475 · published · modified · JSON