CVE-2015-7557

The rsvgnodepolybuildpath function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of service out-of-bounds heap read via an odd number of elements in a coordinate pair in an SVG document...

CVE-2016-4348

CVE-2016-4348 affects librsvg 2.40.2: the _rsvg_css_normalize_font_size function allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via circular definitions in an SVG document. The provided documents confirm the vulnerability details but do n...

CVE-2015-7557

CVE-2015-7557 affects librsvg2 (rsvg-shapes.c: _rsvg_node_poly_build_path) with the vulnerable condition in SVG coordinate pairs; vulnerable versions are librsvg before 2.40.7, enabling a context-dependent denial of service via an out-of-bounds heap read. Multiple connected sources corroborate th...

CVE-2015-7558

librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service infinite loop, stack consumption, and application crash via cyclic references in an SVG document...

CVE-2015-7558

librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service infinite loop, stack consumption, and application crash via cyclic references in an SVG document...

Debian DSA-3584-1 : librsvg - security update

Gustavo Grieco discovered several flaws in the way librsvg, a SAX-based renderer library for SVG files, parses SVG files with circular definitions. A remote attacker can take advantage of these flaws to cause an application using the librsvg library to crash. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : librsvg (openSUSE-2016-608)

This librsvg update to version 2.40.15 fixes the following issues : Security issues fixed : - CVE-2016-4348: DoS parsing SVGs with circular definitions rsvgcssnormalizefontsize function boo977986 Bugs fixed : - Actually scale the image if required, regression fix from upstream git bgo760262. -...

[SECURITY] [DSA 3584-1] librsvg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3584-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 19, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3584-1] librsvg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3584-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 19, 2016 https://www.debian.org/security/faq -...

DSA-3584-1 librsvg - security update

Bulletin has no description...

Debian Security Advisory DSA 3584-1 (librsvg - security update)

Gustavo Grieco discovered several flaws in the way librsvg, a SAX-based renderer library for SVG files, parses SVG files with circular definitions. A remote attacker can take advantage of these flaws to cause an application using the librsvg library to crash. OpenVAS Vulnerability Test $Id:...

Debian DLA-477-1 : librsvg security update

Note CVE-2016-4347 is a duplicate of CVE-2015-7558 Two DoS in librsvg 2.40.2 parsing SVGs with circular definitions were found they will produce stack exhaustion by Gustavo Grieco. The version in wheezy 2.36.1-2+deb7u1 is also vulnerable. For Debian 7 'Wheezy', these problems have been fixed in...

Debian: Security Advisory (DSA-3584-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 477-1] librsvg security update

Package : librsvg Version : 2.36.1-2+deb7u2 CVE ID : CVE-2015-7558 CVE-2016-4347 CVE-2016-4348 Note CVE-2016-4347 is a duplicate of CVE-2015-7558 Two DoS in librsvg 2.40.2 parsing SVGs with circular definitions were found they will produce stack exhaustion by Gustavo Grieco. The version in wheezy...

librsvg2 Out-of-Bounds Heap Read Vulnerability

librsvg2 is an SVG rendering engine written in C. It can be used to render a number of SVG files. A security vulnerability exists in librsvg2. An attacker can exploit this vulnerability to cause an out-of-bounds heap read with an SVG file...

DLA-477-1 librsvg - security update

Bulletin has no description...

LibRSVG '_rsvg_css_normalize_font_size' function denial of service vulnerability

LibRSVG is a SVG rendering engine written in C . A security vulnerability in the 'rsvgcssnormalizefontsize' function of LibRSVG allows remote attackers to cause a denial-of-service attack by exploiting the vulnerability to crash applications linking to this library...

LibRSVG Multiple Function Denial of Service Vulnerabilities

LibRSVG is a SVG rendering engine written in C . A security vulnerability exists in LibRSVG's 'rsvgcairopopdiscretelayer', 'rsvgcairopoprenderstack', and 'rsvgcairogeneratemask' functions contain a security vulnerability that could be exploited by remote attackers to cause a denial-of-service...

Debian DLA-395-1 : librsvg security update

A vulnerability was found in LibRSVG, a library to render SVG graphics. Librsvg was susceptible to an out-of-bounds heap read when parsing SVG files. For Debian 6 'Squeeze', this issue has been fixed in librsvg version 2.26.3-1+deb6u3. We recommend you to upgrade your librsvg packages. Learn more...

[SECURITY] [DLA 395-1] librsvg security update

Package : librsvg Version : 2.26.3-1+deb6u3 CVE ID : CVE-2015-7557 A vulnerability was found in LibRSVG, a library to render SVG graphics. Librsvg was susceptible to an out-of-bounds heap read when parsing SVG files. For Debian 6 "Squeeze", this issue has been fixed in librsvg version...