CVE-2017-11464

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-11464
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11464.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-11464
Downstream
Related
Published
2017-07-19T21:29:00Z
Modified
2025-10-25T12:01:48.030689Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.

References

Affected packages

Git / github.com/gnome/librsvg

Affected ranges

Type
GIT
Repo
https://github.com/gnome/librsvg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ecf9267a24b2c3c0cd211dbdfa9ef2232511972a

Affected versions

2.*

2.34.0
2.34.1
2.35.0
2.35.1
2.35.2
2.36.0
2.36.1
2.36.2
2.36.3
2.36.4
2.37.0
2.39.0
2.40.0
2.40.1
2.40.10
2.40.11
2.40.12
2.40.13
2.40.14
2.40.15
2.40.16
2.40.2
2.40.3
2.40.4
2.40.5
2.40.6
2.40.7
2.40.8
2.40.9
2.41.0

Other

GNOME_2_4_BRANCHPOINT
LIBRSVG_0_0_1
LIBRSVG_1_0_0
LIBRSVG_1_0_1
LIBRSVG_1_0_ANCHOR
LIBRSVG_1_1_1
LIBRSVG_1_1_2
LIBRSVG_1_1_3
LIBRSVG_1_1_4
LIBRSVG_1_1_5
LIBRSVG_1_1_6
LIBRSVG_2_0_1
LIBRSVG_2_1_0
LIBRSVG_2_1_1
LIBRSVG_2_1_2
LIBRSVG_2_1_3
LIBRSVG_2_1_4
LIBRSVG_2_1_5
LIBRSVG_2_22_3
LIBRSVG_2_26_2
LIBRSVG_2_26_3
LIBRSVG_2_2_0
LIBRSVG_2_31_0
help
librsvg-2-13-3
librsvg-2-13-90
librsvg-2-13-93
release-2-2-4
release-2-2-5
release-2-3-0
release-2-4-0

Database specific

vanir_signatures

[
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "60710757765042846072452963898315618095",
                "81260221110783572576927806438717161855",
                "287741113869909529612899174918313465550",
                "260269830588127276579239904639252216220",
                "271919613184680644970865977288842949543",
                "246686619793903000549094537293056569659",
                "333848912678487153469182658722756863527",
                "46477267391596318075153474765805612706",
                "108157836319644259159162778449093533869",
                "297219754582390609361279564228753198207",
                "176682382039225235177199854706792212973",
                "65639977433304009880378936341933579960",
                "4575917603576060409660513994630108673",
                "299226572798831544891234881543592226228",
                "38248917887221310127579179192707040202",
                "181695919477162480657695002558378404689",
                "333551738086001108360925952947498495309",
                "288987956424050598615177992042407208044",
                "39829462587944474158032638248929622032",
                "260216527266713660903957231831411670895",
                "238533111514560442674895364655264063808",
                "12403177967334019117040563182884082994"
            ]
        },
        "id": "CVE-2017-11464-1042029f",
        "target": {
            "file": "rsvg-filter.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/gnome/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
        "signature_type": "Line"
    },
    {
        "digest": {
            "function_hash": "161871756992978402804585812170458726280",
            "length": 1806.0
        },
        "id": "CVE-2017-11464-cd2c1adf",
        "target": {
            "function": "box_blur_line",
            "file": "rsvg-filter.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/gnome/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "178831317672766392428689827288743486572",
            "length": 2858.0
        },
        "id": "CVE-2017-11464-dceb298a",
        "target": {
            "function": "gaussian_blur_surface",
            "file": "rsvg-filter.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://github.com/gnome/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
        "signature_type": "Function"
    }
]

Git / github.com/gnome/librsvg

Affected ranges

Type
GIT
Repo
https://gitlab.gnome.org/GNOME/librsvg
Events
Introduced
0 Unknown introduced commit / All previous commits are affected