GNOME librsvg 'rsvg-filter.c' Denial of Service Vulnerability

Bugtraq ID:	99956
Class:	Unknown
CVE:	CVE-2017-11464
Remote:	Yes
Local:	No
Published:	Jul 26 2017 12:00AM
Updated:	Jul 26 2017 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0 Redhat Enterprise Linux 5 GNOME librsvg 2.40.17
Not Vulnerable:

GNOME librsvg 'rsvg-filter.c' Denial of Service Vulnerability

GNOME librsvg is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause a denial-of-service condition.

GNOME librsvg 2.40.17 is vulnerable; other versions may also be affected.

GNOME librsvg 'rsvg-filter.c' Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GNOME librsvg 'rsvg-filter.c' Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

GNOME librsvg 'rsvg-filter.c' Denial of Service Vulnerability

References:

• bgo#783835 - Don't divide by zero in box_blur_line() for gaussian blurs (librsvg)
  
• CVE-2017-11464 (Redhat)
  
• bgo#783835 - Don't divide by zero in box_blur_line() for gaussian blurs (librsvg)
  
• GNOME Homepage (GNOME)
  
• Bug 1474400 - (CVE-2017-11464) CVE-2017-11464 librsvg: SIGFPE is raised in box_ (Redhat)