Lucene search

Denial Of Service (DoS)

🗓️ 09 Oct 2023 06:37:38Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 9 Views

libvips.so vulnerability to Denial of Service (DoS) due to improper character handling in svgload.

Reporter	Title	Published	Views	Family All 16
UbuntuCve	CVE-2023-40032	11 Sep 202300:00	–	ubuntucve
Tenable Nessus	Fedora 39 : vips (2024-5c3c77b8eb)	29 Jan 202400:00	–	nessus
Tenable Nessus	Fedora 40 : vips (2024-791f8d9804)	29 Apr 202400:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM / 18.04 ESM / 22.04 ESM : VIPS vulnerabilities (USN-6437-1)	18 Oct 202300:00	–	nessus
CVE	CVE-2023-40032	11 Sep 202319:15	–	cve
Cvelist	CVE-2023-40032 Potential segfault due to NULL pointer dereference in libvips	11 Sep 202318:34	–	cvelist
OpenVAS	Fedora: Security Advisory (FEDORA-2024-791f8d9804)	10 Sep 202400:00	–	openvas
OpenVAS	Fedora: Security Advisory (FEDORA-2024-5c3c77b8eb)	30 Jan 202400:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-6437-1)	19 Oct 202300:00	–	openvas
Debian CVE	CVE-2023-40032	11 Sep 202319:15	–	debiancve

Vulners

Node

-libvips.soRange≤42.16.3

Source	Link
bugzilla	www.bugzilla.suse.com/show_bug.cgi
github	www.github.com/libvips/libvips/pull/3604
github	www.github.com/libvips/libvips/commit/e091d65835966ef56d53a4105a7362cafdb1582b
github	www.github.com/libvips/libvips/security/advisories/GHSA-33qp-9pq7-9584
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/YU2FFC47X2XDEGEHEWAGLU5L3R6FEYD2/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Oct 2023 06:38Current

7.4High risk

Vulners AI Score7.4

CVSS35.5

EPSS0.000