CVE-2017-11464

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-11464
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11464.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-11464
Downstream
Related
Published
2017-07-19T21:29:00.197Z
Modified
2026-07-08T11:49:28.772947Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.

References

Affected packages

Git / github.com/gnome/librsvg

Affected ranges

Type
GIT
Repo
https://github.com/gnome/librsvg
Events
Introduced
f4cf9aca144eeda8f441f839881bcbd492529002
Last affected
f4cf9aca144eeda8f441f839881bcbd492529002
Fixed
ecf9267a24b2c3c0cd211dbdfa9ef2232511972a
Database specific 
{
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:gnome:librsvg:2.40.17:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.40.17"
        },
        {
            "last_affected": "2.40.17"
        }
    ]
}

Affected versions

2.*
2.40.17

Database specific

vanir_signatures_modified 
"2026-07-08T11:49:28Z"
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11464.json"
vanir_signatures 
[
    {
        "id": "CVE-2017-11464-1042029f",
        "digest": {
            "line_hashes": [
                "60710757765042846072452963898315618095",
                "81260221110783572576927806438717161855",
                "287741113869909529612899174918313465550",
                "260269830588127276579239904639252216220",
                "271919613184680644970865977288842949543",
                "246686619793903000549094537293056569659",
                "333848912678487153469182658722756863527",
                "46477267391596318075153474765805612706",
                "108157836319644259159162778449093533869",
                "297219754582390609361279564228753198207",
                "176682382039225235177199854706792212973",
                "65639977433304009880378936341933579960",
                "4575917603576060409660513994630108673",
                "299226572798831544891234881543592226228",
                "38248917887221310127579179192707040202",
                "181695919477162480657695002558378404689",
                "333551738086001108360925952947498495309",
                "288987956424050598615177992042407208044",
                "39829462587944474158032638248929622032",
                "260216527266713660903957231831411670895",
                "238533111514560442674895364655264063808",
                "12403177967334019117040563182884082994"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/gnome/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
        "deprecated": false,
        "target": {
            "file": "rsvg-filter.c"
        }
    },
    {
        "id": "CVE-2017-11464-cd2c1adf",
        "digest": {
            "function_hash": "161871756992978402804585812170458726280",
            "length": 1806.0
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/gnome/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
        "deprecated": false,
        "target": {
            "function": "box_blur_line",
            "file": "rsvg-filter.c"
        }
    },
    {
        "id": "CVE-2017-11464-dceb298a",
        "digest": {
            "function_hash": "178831317672766392428689827288743486572",
            "length": 2858.0
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/gnome/librsvg/commit/ecf9267a24b2c3c0cd211dbdfa9ef2232511972a",
        "deprecated": false,
        "target": {
            "function": "gaussian_blur_surface",
            "file": "rsvg-filter.c"
        }
    }
]

Git / gitlab.gnome.org/gnome/librsvg

Affected ranges

Type
GIT
Repo
https://gitlab.gnome.org/gnome/librsvg
Events
Introduced
f4cf9aca144eeda8f441f839881bcbd492529002
Last affected
f4cf9aca144eeda8f441f839881bcbd492529002
Database specific 
{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:gnome:librsvg:2.40.17:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.40.17"
        },
        {
            "last_affected": "2.40.17"
        }
    ]
}

Affected versions

2.*
2.40.17

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11464.json"