CVE-2018-17332: High severity centos libssh2 vulnerability
Published Sep 22, 2018
·Updated
An issue was discovered in libsvg2 through 2012-10-19. The svgGetNextPathField function in svgstring.c returns its input pointer in certain circumstances, which might result in a memory leak caused by wasteful malloc calls.
Affected Software
1 affected component
Libsvg2 Project Libsvg2<=2012-10-19
Event History
Sep 22, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-17332?
CVE-2018-17332 has not been assigned a CVSS score but it is considered a medium severity issue due to potential memory leaks.
2
How do I fix CVE-2018-17332?
To fix CVE-2018-17332, you should update to a version of libsvg2 released after October 19, 2012.
3
What software is affected by CVE-2018-17332?
CVE-2018-17332 affects libsvg2 versions up to and including 2012-10-19.
4
What is the impact of CVE-2018-17332?
The impact of CVE-2018-17332 is primarily a memory leak that can lead to inefficient memory use.
5
Who should be concerned about CVE-2018-17332?
Developers and system administrators using affected versions of libsvg2 should be concerned about CVE-2018-17332.