CVE-2017-11464

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-11464
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11464.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-11464
Downstream
Related
Published
2017-07-19T21:29:00Z
Modified
2025-09-19T08:46:22.049711Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.

References

Affected packages

Git / github.com/gnome/librsvg

Affected ranges

Type
GIT
Repo
https://github.com/gnome/librsvg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ecf9267a24b2c3c0cd211dbdfa9ef2232511972a
Type
GIT
Repo
https://gitlab.gnome.org/GNOME/librsvg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f4cf9aca144eeda8f441f839881bcbd492529002

Affected versions

2.*

2.34.0
2.34.1
2.35.0
2.35.1
2.35.2
2.36.0
2.36.1
2.36.2
2.36.3
2.36.4
2.37.0
2.39.0
2.40.0
2.40.1
2.40.10
2.40.11
2.40.12
2.40.13
2.40.14
2.40.15
2.40.16
2.40.17
2.40.2
2.40.3
2.40.4
2.40.5
2.40.6
2.40.7
2.40.8
2.40.9
2.41.0

Other

GNOME_2_4_BRANCHPOINT
LIBRSVG_0_0_1
LIBRSVG_1_0_0
LIBRSVG_1_0_1
LIBRSVG_1_0_ANCHOR
LIBRSVG_1_1_1
LIBRSVG_1_1_2
LIBRSVG_1_1_3
LIBRSVG_1_1_4
LIBRSVG_1_1_5
LIBRSVG_1_1_6
LIBRSVG_2_0_1
LIBRSVG_2_1_0
LIBRSVG_2_1_1
LIBRSVG_2_1_2
LIBRSVG_2_1_3
LIBRSVG_2_1_4
LIBRSVG_2_1_5
LIBRSVG_2_22_3
LIBRSVG_2_26_2
LIBRSVG_2_26_3
LIBRSVG_2_2_0
LIBRSVG_2_31_0
help
librsvg-2-13-3
librsvg-2-13-90
librsvg-2-13-93
release-2-2-4
release-2-2-5
release-2-3-0
release-2-4-0

Database specific 

{
    "vanir_signatures": [
        {
            "id": "CVE-2017-11464-1042029f",
            "signature_type": "Line",
            "target": {
                "file": "rsvg-filter.c"
            },
            "digest": {
                "line_hashes": [
                    "60710757765042846072452963898315618095",
                    "81260221110783572576927806438717161855",
                    "287741113869909529612899174918313465550",
                    "260269830588127276579239904639252216220",
                    "271919613184680644970865977288842949543",
                    "246686619793903000549094537293056569659",
                    "333848912678487153469182658722756863527",
                    "46477267391596318075153474765805612706",
                    "108157836319644259159162778449093533869",
                    "297219754582390609361279564228753198207",
                    "176682382039225235177199854706792212973",
                    "65639977433304009880378936341933579960",
                    "4575917603576060409660513994630108673",
                    "299226572798831544891234881543592226228",
                    "38248917887221310127579179192707040202",
                    "181695919477162480657695002558378404689",
                    "333551738086001108360925952947498495309",
                    "288987956424050598615177992042407208044",
                    "39829462587944474158032638248929622032",
                    "260216527266713660903957231831411670895",
                    "238533111514560442674895364655264063808",
                    "12403177967334019117040563182884082994"
                ],
                "threshold": 0.9
            },
            "source": "https://github.com/gnome/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "id": "CVE-2017-11464-cd2c1adf",
            "signature_type": "Function",
            "target": {
                "file": "rsvg-filter.c",
                "function": "box_blur_line"
            },
            "digest": {
                "function_hash": "161871756992978402804585812170458726280",
                "length": 1806.0
            },
            "source": "https://github.com/gnome/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "id": "CVE-2017-11464-dceb298a",
            "signature_type": "Function",
            "target": {
                "file": "rsvg-filter.c",
                "function": "gaussian_blur_surface"
            },
            "digest": {
                "function_hash": "178831317672766392428689827288743486572",
                "length": 2858.0
            },
            "source": "https://github.com/gnome/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
            "signature_version": "v1",
            "deprecated": false
        }
    ]
}