The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade librsvg2Upgrade librsvg2-develUpgrade librsvg2-tools | May 4, 2022 | Feb 2, 2020 |
| Alpine Linux | — | Upgrade librsvg | Aug 22, 2024 | Feb 2, 2020 |
| Centos_linux | — | Upgrade librsvg2Upgrade librsvg2-debugsourceUpgrade librsvg2-develUpgrade librsvg2-debuginfoUpgrade librsvg2-toolsUpgrade librsvg2-tools-debuginfo | Nov 5, 2020 | Feb 2, 2020 |
| Debian | — | Upgrade librsvg | Jul 23, 2020 | Feb 2, 2020 |
| Freebsd | — | Upgrade librsvg2-rustUpgrade librsvg2 | Mar 3, 2020 | Mar 2, 2020 |
| Oracle_linux | — | Upgrade librsvg2-toolsUpgrade librsvg2Upgrade librsvg2-devel | Nov 12, 2020 | Feb 2, 2020 |
| Redhat_linux | — | Upgrade librsvg2-debuginfoUpgrade librsvg2-toolsUpgrade librsvg2-debugsourceUpgrade librsvg2Upgrade librsvg2-develUpgrade librsvg2-tools-debuginfoNo solution exists | Nov 5, 2020 | Feb 2, 2020 |
| Rocky_linux | — | Upgrade librsvg2-tools-debuginfoUpgrade librsvg2-debugsourceUpgrade librsvg2-toolsUpgrade librsvg2-debuginfoUpgrade librsvg2Upgrade librsvg2-devel | Mar 12, 2024 | Feb 2, 2020 |
| Suse | — | Upgrade librsvg-develUpgrade gdk-pixbuf-loader-rsvgUpgrade rsvg-thumbnailerUpgrade librsvg-2-2-32bitUpgrade gdk-pixbuf-loader-rsvg-32bitUpgrade librsvg-2-2Upgrade typelib-1_0-Rsvg-2_0Upgrade rsvg-view | Mar 7, 2020 | Feb 2, 2020 |
| Ubuntu | — | Upgrade librsvg2-2 | Aug 5, 2020 | Feb 2, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub