1199776 – (CVE-2021-42700) VUL-0: CVE-2021-42700: inkscape: out-of-bounds read found in Inkscape

Bug 1199776 (CVE-2021-42700) - VUL-0: CVE-2021-42700: inkscape: out-of-bounds read found in Inkscape

Summary: VUL-0: CVE-2021-42700: inkscape: out-of-bounds read found in Inkscape

Status:	RESOLVED INVALID

Alias:	CVE-2021-42700

Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents (show other bugs)
Version:	unspecified
Hardware:	Other Other

Priority:	P3 - Medium Severity: Normal
Target Milestone:	---
Assignee:	E-mail List
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/332337/
Whiteboard:	CVSSv3.1:SUSE:CVE-2021-42700:3.3:(AV:...
Keywords:

Depends on:
Blocks:

Clone This Bug

Reported:	2022-05-20 13:43 UTC by Thomas Leroy
Modified:	2022-08-17 14:26 UTC (History)
CC List:	2 users (show)

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Thomas Leroy 2022-05-20 13:43:33 UTC

rh#2088225

Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-03

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2088225
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-42700
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42700
https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-03

Comment 1 Thomas Leroy 2022-05-20 13:43:49 UTC

See bnc#1199774

Comment 2 Cathy Hu 2022-08-17 14:26:18 UTC

Closing, not affected