ALT-PU-2017-1909-1

Package update librsvg in branch p8

Version2.40.18-alt0.M80P.1

Published2017-07-20

Max severityHIGH

Severity:

Closed issues (2)

HIGH8.8

Уязвимость реализации функции function box_blur_line библиотеки отрисовки векторной графики librsvg, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2020-08-19Modified: 2023-11-21

CVSS 3.xHIGH 8.8

CVSS:3.x/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS 2.0CRITICAL 9.3

CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:C

References

CVE-2017-11464

HIGH7.8

A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.

Published: 2017-07-19Modified: 2025-04-20

CVSS 2.0MEDIUM 6.8

CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS 3.xHIGH 7.8

CVSS:3.x/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References