CVE-2023-37769

2023-07-1720:15:13

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-37769

fpe vulnerability

stress-test

master commit

e4c878

component combine_inner

pixman-combine-float.c

unix

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

21.0%

JSON

stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine_inner at /pixman-combine-float.c.

OSVersionArchitecturePackageVersionFilename
Debian12allpixman<= 0.42.2-1pixman_0.42.2-1_all.deb
Debian11allpixman<= 0.40.0-1.1~deb11u1pixman_0.40.0-1.1~deb11u1_all.deb
Debian999allpixman<= 0.42.2-1pixman_0.42.2-1_all.deb
Debian13allpixman<= 0.42.2-1pixman_0.42.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	pixman	<= 0.42.2-1	pixman_0.42.2-1_all.deb
Debian	11	all	pixman	<= 0.40.0-1.1~deb11u1	pixman_0.40.0-1.1~deb11u1_all.deb
Debian	999	all	pixman	<= 0.42.2-1	pixman_0.42.2-1_all.deb
Debian	13	all	pixman	<= 0.42.2-1	pixman_0.42.2-1_all.deb