CVE-2015-7558: librsvg DoS via Cyclic References

May 17, 2022 (updated August 4, 2023)

librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack consumption, and application crash) via cyclic references in an SVG document.

References

bugzilla.redhat.com/show_bug.cgi?id=1268243
git.gnome.org/browse/librsvg/commit/?id=a51919f7e1ca9c535390a746fbf6e28c8402dc61
github.com/GNOME/librsvg
github.com/advisories/GHSA-j984-q4qc-6qxf
nvd.nist.gov/vuln/detail/CVE-2015-7558

Code Behaviors & Features

Detect and mitigate CVE-2015-7558 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →