CVE-2016-4348

Description

References

• lists.opensuse.org/opensuse-updates/2016-05/msg00079.html · Third Party Advisory
• debian.org/security/2016/dsa-3584 · Third Party Advisory
• openwall.com/lists/oss-security/2016/04/28/4
• openwall.com/lists/oss-security/2016/04/28/7
• openwall.com/lists/oss-security/2016/04/30/3
• openwall.com/lists/oss-security/2016/05/10/15
• git.gnome.org/browse/librsvg/commit · Vendor Advisory

More vulnerabilities in librsvg

• CVE-2023-38633MEDIUM 5.5A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on t…
• CVE-2019-20446MEDIUM 6.5In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for…
• CVE-2018-1000041HIGH 8.8GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c…
• CVE-2017-11464HIGH 7.8A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, …
• CVE-2016-6163MEDIUM 5.5The rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service (out-o…