12 matches found
Linux Distros Unpatched Vulnerability : CVE-2015-7557
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rsvgnodepolybuildpath function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of service out-of-bounds heap...
RHEL 5 : librsvg2 (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - librsvg: SIGFPE is raised in boxblurline function of rsvg-filter.c CVE-2017-11464 - The...
Huawei EulerOS: Security Advisory for librsvg2 (EulerOS-SA-2019-2493)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : librsvg2 (EulerOS-SA-2019-2614)
According to the versions of the librsvg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service infinite loop, stack consumption, and application crash...
CVE-2015-7557
The rsvgnodepolybuildpath function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of service out-of-bounds heap read via an odd number of elements in a coordinate pair in an SVG document...
CVE-2015-7557
The rsvgnodepolybuildpath function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of service out-of-bounds heap read via an odd number of elements in a coordinate pair in an SVG document...
CVE-2015-7557
CVE-2015-7557 affects librsvg2 (rsvg-shapes.c: _rsvg_node_poly_build_path) with the vulnerable condition in SVG coordinate pairs; vulnerable versions are librsvg before 2.40.7, enabling a context-dependent denial of service via an out-of-bounds heap read. Multiple connected sources corroborate th...
CVE-2015-7557
The rsvgnodepolybuildpath function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of service out-of-bounds heap read via an odd number of elements in a coordinate pair in an SVG document...
[SECURITY] [DLA 395-1] librsvg security update
Package : librsvg Version : 2.26.3-1+deb6u3 CVE ID : CVE-2015-7557 A vulnerability was found in LibRSVG, a library to render SVG graphics. Librsvg was susceptible to an out-of-bounds heap read when parsing SVG files. For Debian 6 "Squeeze", this issue has been fixed in librsvg version...
Updated librsvg packages fix security vulnerability
Out-of-bounds heap read in librsvg2 was found when parsing SVG file CVE-2015-7557. Stack exhaustion due to cyclic dependency causing to crash an application was found in librsvg2 while parsing SVG file CVE-2015-7558. The librsvg package has been updated to version 2.40.13, fixing these issues and...
FreeBSD : librsvg2 -- denial of service vulnerability (da634091-a84a-11e5-8f5c-002590263bf5)
Adam Maris, Red Hat Product Security, reports : CVE-2015-7557: Out-of-bounds heap read in librsvg2 was found when parsing SVG file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyrigh...
librsvg2 -- denial of service vulnerability
Adam Maris, Red Hat Product Security, reports: CVE-2015-7557: Out-of-bounds heap read in librsvg2 was found when parsing SVG file...