{"action":"Upgrade cairo to 1.15.5 or later.","affected":[{"fixed":"1.15.5","introduced":"1.15.4"}],"component":"cairo","cve_ids":["CVE-2017-7475"],"ecosystem":"RubyGems","epss":0.01824,"exploited":false,"fixed_versions":["1.15.5"],"ghsa_id":"GHSA-5v3f-73gv-x7x5","id":"tcs_01M5KEH45NWGE13S6QGK695FGC","modified_at":"2023-11-08T03:59:24.563034Z","published_at":"2017-11-15T20:41:14Z","references":["https://osv.dev/vulnerability/GHSA-5v3f-73gv-x7x5","https://nvd.nist.gov/vuln/detail/CVE-2017-7475","https://bugs.freedesktop.org/show_bug.cgi?id=100763","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475","https://github.com/rcairo/rcairo","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cairo/CVE-2017-7475.yml","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E","http://seclists.org/oss-sec/2017/q2/151"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-5v3f-73gv-x7x5","url":"https://osv.dev/vulnerability/GHSA-5v3f-73gv-x7x5"}],"summary":"cairo is vulnerable to denial of service due to a null pointer dereference"}