CVE-2017-11464

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-11464
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11464.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-11464
Downstream
Related
Published
2017-07-19T21:29:00Z
Modified
2026-07-08T11:49:28Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.

References

Affected packages

Git / github.com/gnome/librsvg

Affected ranges

Type
GIT
Repo
https://github.com/gnome/librsvg
Events
Introduced
f4cf9aca144eeda8f441f839881bcbd492529002
Last Affected
f4cf9aca144eeda8f441f839881bcbd492529002
Fixed
ecf9267a24b2c3c0cd211dbdfa9ef2232511972a
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:gnome:librsvg:2.40.17:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "2.40.17"
        },
        {
            "last_affected":  "2.40.17"
        }
    ],
    "source":  [
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

2.*
2.40.17

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11464.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "60710757765042846072452963898315618095",
                "81260221110783572576927806438717161855",
                "287741113869909529612899174918313465550",
                "260269830588127276579239904639252216220",
                "271919613184680644970865977288842949543",
                "246686619793903000549094537293056569659",
                "333848912678487153469182658722756863527",
                "46477267391596318075153474765805612706",
                "108157836319644259159162778449093533869",
                "297219754582390609361279564228753198207",
                "176682382039225235177199854706792212973",
                "65639977433304009880378936341933579960",
                "4575917603576060409660513994630108673",
                "299226572798831544891234881543592226228",
                "38248917887221310127579179192707040202",
                "181695919477162480657695002558378404689",
                "333551738086001108360925952947498495309",
                "288987956424050598615177992042407208044",
                "39829462587944474158032638248929622032",
                "260216527266713660903957231831411670895",
                "238533111514560442674895364655264063808",
                "12403177967334019117040563182884082994"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2017-11464-1042029f",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/gnome/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
        "target":  {
            "file":  "rsvg-filter.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "161871756992978402804585812170458726280",
            "length":  1806
        },
        "id":  "CVE-2017-11464-cd2c1adf",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/gnome/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
        "target":  {
            "file":  "rsvg-filter.c",
            "function":  "box_blur_line"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "178831317672766392428689827288743486572",
            "length":  2858
        },
        "id":  "CVE-2017-11464-dceb298a",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/gnome/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
        "target":  {
            "file":  "rsvg-filter.c",
            "function":  "gaussian_blur_surface"
        }
    }
]
vanir_signatures_modified 
"2026-07-08T11:49:28Z"

Git / gitlab.gnome.org/gnome/librsvg

Affected ranges

Type
GIT
Repo
https://gitlab.gnome.org/gnome/librsvg
Events
Introduced
f4cf9aca144eeda8f441f839881bcbd492529002
Last Affected
f4cf9aca144eeda8f441f839881bcbd492529002
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:gnome:librsvg:2.40.17:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "2.40.17"
        },
        {
            "last_affected":  "2.40.17"
        }
    ],
    "source":  "CPE_STRING"
}

Affected versions

2.*
2.40.17

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11464.json"