Bug#892590: graphite2: CVE-2018-7999: null pointer dereference in Segment()

2018-03-11 Thread Rene Engelhard
Hi, On Sun, Mar 11, 2018 at 06:56:30PM +0100, Moritz Mühlenhoff wrote: > On Sun, Mar 11, 2018 at 02:02:22PM +0100, Rene Engelhard wrote: > > Hi, > > > > On Sun, Mar 11, 2018 at 08:43:32AM +0100, Salvatore Bonaccorso wrote: > > > CVE-2018-7999[0]: > > > | In libgraphite2 in graphite2 1.3.11, a

Bug#892590: graphite2: CVE-2018-7999: null pointer dereference in Segment()

2018-03-11 Thread Moritz Mühlenhoff
On Sun, Mar 11, 2018 at 02:02:22PM +0100, Rene Engelhard wrote: > Hi, > > On Sun, Mar 11, 2018 at 08:43:32AM +0100, Salvatore Bonaccorso wrote: > > CVE-2018-7999[0]: > > | In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference > > | vulnerability was found in Segment.cpp during a

Bug#892590: graphite2: CVE-2018-7999: null pointer dereference in Segment()

2018-03-11 Thread Rene Engelhard
Hi, On Sun, Mar 11, 2018 at 02:02:22PM +0100, Rene Engelhard wrote: > On Sun, Mar 11, 2018 at 08:43:32AM +0100, Salvatore Bonaccorso wrote: > > CVE-2018-7999[0]: > > | In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference > > | vulnerability was found in Segment.cpp during a

Bug#892590: graphite2: CVE-2018-7999: null pointer dereference in Segment()

2018-03-11 Thread Rene Engelhard
Hi, On Sun, Mar 11, 2018 at 08:43:32AM +0100, Salvatore Bonaccorso wrote: > CVE-2018-7999[0]: > | In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference > | vulnerability was found in Segment.cpp during a dumbRendering > | operation, which may allow attackers to cause a denial of service

Bug#892590: graphite2: CVE-2018-7999: null pointer dereference in Segment()

2018-03-10 Thread Salvatore Bonaccorso
Source: graphite2 Version: 1.3.10-8 Severity: important Tags: patch security upstream Forwarded: https://github.com/silnrsi/graphite/issues/22 Control: found -1 1.3.11-1 Hi, the following vulnerability was published for graphite2. CVE-2018-7999[0]: | In libgraphite2 in graphite2 1.3.11, a NULL