CVE-2017-11464

NameCVE-2017-11464
DescriptionA SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
NVD severitymedium (attack range: remote)
Debian Bugs869129

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
librsvg (PTS)wheezy2.36.1-2+deb7u1fixed
wheezy (security)2.36.1-2+deb7u2fixed
jessie (security), jessie2.40.5-1+deb8u2fixed
stretch2.40.16-1vulnerable
buster, sid2.40.18-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
librsvgsource(unstable)2.40.18-1medium869129
librsvgsourcejessie(not affected)
librsvgsourcewheezy(not affected)

Notes

[stretch] - librsvg <no-dsa> (Minor issue)
[jessie] - librsvg <not-affected> (Vulnerable code introduced in 2.40.9)
[wheezy] - librsvg <not-affected> (Vulnerable code introduced in 2.40.9)
https://bugzilla.gnome.org/show_bug.cgi?id=783835
Introduced in: https://git.gnome.org/browse/librsvg/commit/?id=054807726db76558728e7a7513aabc4698b3dc95 (2.40.9)
Fixed by: https://git.gnome.org/browse/librsvg/commit/?id=ecf9267a24b2c3c0cd211dbdfa9ef2232511972a

Search for package or bug name: Reporting problems