Lucene search

CVE-2023-40032 Potential segfault due to NULL pointer dereference in libvips

🗓️ 11 Sep 2023 18:59:34Reported by GitHub_MType

Potential segfault in libvips due to NULL pointer dereference when parsing malformed UTF-8 characte

Reporter	Title	Published	Views	Family All 16
UbuntuCve	CVE-2023-40032	11 Sep 202300:00	–	ubuntucve
Tenable Nessus	Fedora 39 : vips (2024-5c3c77b8eb)	29 Jan 202400:00	–	nessus
Tenable Nessus	Fedora 40 : vips (2024-791f8d9804)	29 Apr 202400:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM / 18.04 ESM / 22.04 ESM : VIPS vulnerabilities (USN-6437-1)	18 Oct 202300:00	–	nessus
CVE	CVE-2023-40032	11 Sep 202319:15	–	cve
OpenVAS	Fedora: Security Advisory (FEDORA-2024-791f8d9804)	10 Sep 202400:00	–	openvas
OpenVAS	Fedora: Security Advisory (FEDORA-2024-5c3c77b8eb)	30 Jan 202400:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-6437-1)	19 Oct 202300:00	–	openvas
Debian CVE	CVE-2023-40032	11 Sep 202319:15	–	debiancve
NVD	CVE-2023-40032	11 Sep 202319:15	–	nvd

[
  {
    "vendor": "libvips",
    "product": "libvips",
    "versions": [
      {
        "version": "< 8.14.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/YU2FFC47X2XDEGEHEWAGLU5L3R6FEYD2/
github	www.github.com/libvips/libvips/pull/3604
github	www.github.com/libvips/libvips/security/advisories/GHSA-33qp-9pq7-9584
github	www.github.com/libvips/libvips/commit/e091d65835966ef56d53a4105a7362cafdb1582b

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Sep 2023 18:34Current

5.7Medium risk

Vulners AI Score5.7

CVSS35.5

EPSS0.000

CWE-476