PatchTheCVEshoco vulnerabilities and fixes
Recent CVEs affecting shoco, with upgrade or downgrade steps. 1 tracked.
shoco has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2017-07-17. Highest priority: CVE-2017-11367 (score 50/100).
- CVE-2017-11367 HIGH 7.5 UPGRADE The shoco_decompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial
FAQ
How do I fix shoco vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is shoco being exploited right now?
None of the tracked shoco CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which shoco CVE should I patch first?
CVE-2017-11367 currently ranks highest (50/100): The shoco_decompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial.