Division by zero in librsvg - CVE-2017-11464

Vulnerability identifier: #VU24817

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-11464

CWE-ID: CWE-369

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a division by zero error within the box_blur_line() function in rsvg-filter.c. A remote attacker can pass specially crafted SVG file to the application and crash it.

librsvg
Ubuntu
Fedora
librsvg2-2 (Ubuntu package)
librsvg2
mingw-librsvg2

Install update from vendor's website.

librsvg - update to 2.40.18
librsvg2-2 (Ubuntu package) - addressed in versions 2.40.13-3ubuntu0.1, 2.40.13-3ubuntu0.2, 2.40.20-2ubuntu0.1, 2.40.20-2ubuntu0.2
librsvg2 - addressed in versions 2.40.18-1.fc24, 2.40.18-1.fc25, 2.40.18-1.fc26
mingw-librsvg2 - addressed in versions 2.40.18-1.fc24, 2.40.18-1.fc25, 2.40.18-1.fc26

• http://www.securityfocus.com/bid/99956
• https://bugzilla.gnome.org/show_bug.cgi?id=783835
• https://git.gnome.org/browse/librsvg/commit/?id=ecf9267a24b2c3c0cd211dbdfa9ef2232511972a
• https://github.com/GNOME/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a

• Denial of service in librsvg
• Ubuntu update for librsvg
• Ubuntu update for librsvg
• Fedora 26 update for librsvg2
• Fedora 24 update for librsvg2
• Fedora 25 update for librsvg2
• Fedora 24 update for mingw-librsvg2
• Fedora 26 update for mingw-librsvg2
• Fedora 25 update for mingw-librsvg2