Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-3146HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-3146
2022-10-0316:15:06
Debian Security Bug Tracker
security-tracker.debian.org
3
denial of service
arbitrary code execution
svg file
rsvgfilterprimitive
unix
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
59.8%
librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference) and possibly execute arbitrary code via a SVG file with a node with the element name starting with “fe,” which is misidentified as a RsvgFilterPrimitive.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | librsvg | < 2.34.1-1 | librsvg_2.34.1-1_all.deb |
| Debian | 11 | all | librsvg | < 2.34.1-1 | librsvg_2.34.1-1_all.deb |
| Debian | 999 | all | librsvg | < 2.34.1-1 | librsvg_2.34.1-1_all.deb |
| Debian | 13 | all | librsvg | < 2.34.1-1 | librsvg_2.34.1-1_all.deb |
Related
nessus
nessus
SuSE 11.1 Security Update : librsvg (SAT Patch Number 5166)
2011-12-13 00:00:00
Fedora 14 : librsvg2-2.32.0-4.fc14 (2011-12301)
2011-09-20 00:00:00
Fedora 16 : librsvg2-2.34.1-1.fc16 (2011-12312)
2011-09-12 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2011-1289)
2015-10-06 00:00:00
Ubuntu: Security Advisory (USN-1206-1)
2011-09-16 00:00:00
Fedora Update for librsvg2 FEDORA-2011-12301
2011-09-23 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: librsvg2-2.34.0-2.fc15
2011-09-10 23:58:14
[SECURITY] Fedora 14 Update: librsvg2-2.32.0-4.fc14
2011-09-19 22:58:23
[SECURITY] Fedora 16 Update: librsvg2-2.34.1-1.fc16
2011-09-11 01:44:00
prion
prion
Null pointer dereference
2012-09-05 23:55:00
nvd
nvd
CVE-2011-3146
2012-09-05 23:55:01
cvelist
cvelist
CVE-2011-3146
2022-10-03 16:15:06
cve
cve
CVE-2011-3146
2022-10-03 16:15:06
redhat
redhat
(RHSA-2011:1289) Moderate: librsvg2 security update
2011-09-13 00:00:00
ubuntu
ubuntu
librsvg vulnerability
2011-09-13 00:00:00
securityvulns
securityvulns
[USN-1206-1] librsvg vulnerability
2011-09-20 00:00:00
librsvg code execution
2011-09-20 00:00:00
oraclelinux
oraclelinux
librsvg2 security update
2011-09-13 00:00:00
librsvg2 security update (updated 02/05/2014)
2014-02-03 00:00:00
ubuntucve
ubuntucve
CVE-2011-3146
2011-09-06 00:00:00
kitploit
kitploit
Radamsa - A General-Purpose Fuzzer
2024-03-25 11:30:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
59.8%
Related for DEBIANCVE:CVE-2011-3146