CVE-2023-4508

2023-08-2423:15:09

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-4508

gerbv

denial-of-service

gerber rs-274x

unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

10.5%

JSON

A user able to control file input to Gerbv, between versions 2.4.0 and 2.10.0, can cause a crash and cause denial-of-service with a specially crafted Gerber RS-274X file.

OSVersionArchitecturePackageVersionFilename
Debian12allgerbv<= 2.9.6-1gerbv_2.9.6-1_all.deb
Debian11allgerbv<= 2.7.0-2+deb11u2gerbv_2.7.0-2+deb11u2_all.deb
Debian10allgerbv< 2.7.0-1+deb10u3gerbv_2.7.0-1+deb10u3_all.deb
Debian999allgerbv< 2.10.0-1gerbv_2.10.0-1_all.deb
Debian13allgerbv< 2.10.0-1gerbv_2.10.0-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	gerbv	<= 2.9.6-1	gerbv_2.9.6-1_all.deb
Debian	11	all	gerbv	<= 2.7.0-2+deb11u2	gerbv_2.7.0-2+deb11u2_all.deb
Debian	10	all	gerbv	< 2.7.0-1+deb10u3	gerbv_2.7.0-1+deb10u3_all.deb
Debian	999	all	gerbv	< 2.10.0-1	gerbv_2.10.0-1_all.deb
Debian	13	all	gerbv	< 2.10.0-1	gerbv_2.10.0-1_all.deb