libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Libcroco | Gnome | * | 0.6.13 (including) |
Red Hat Enterprise Linux 7 | RedHat | libcroco-0:0.6.12-6.el7_9 | * |
Red Hat Enterprise Linux 8 | RedHat | libcroco-0:0.6.12-4.el8_2.1 | * |
Gnome-shell | Ubuntu | bionic | * |
Gnome-shell | Ubuntu | groovy | * |
Gnome-shell | Ubuntu | hirsute | * |
Gnome-shell | Ubuntu | impish | * |
Gnome-shell | Ubuntu | kinetic | * |
Gnome-shell | Ubuntu | trusty | * |
Gnome-shell | Ubuntu | xenial | * |
Libcroco | Ubuntu | bionic | * |
Libcroco | Ubuntu | eoan | * |
Libcroco | Ubuntu | esm-infra-legacy/trusty | * |
Libcroco | Ubuntu | esm-infra/bionic | * |
Libcroco | Ubuntu | esm-infra/xenial | * |
Libcroco | Ubuntu | focal | * |
Libcroco | Ubuntu | groovy | * |
Libcroco | Ubuntu | precise/esm | * |
Libcroco | Ubuntu | trusty | * |
Libcroco | Ubuntu | trusty/esm | * |
Libcroco | Ubuntu | upstream | * |
Libcroco | Ubuntu | xenial | * |