{"id":"CVE-2023-4508","summary":"Denial of Service in Gerbv","details":"A user able to control file input to Gerbv, between versions 2.4.0 and 2.10.0, can cause a crash and cause denial-of-service with a specially crafted Gerber RS-274X file.","modified":"2026-08-12T14:51:16.062241Z","published":"2023-08-24T22:51:47.669Z","related":["openSUSE-SU-2024:13474-1"],"database_specific":{"cna_assigner":"canonical","cwe_ids":["CWE-824"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4508.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4508.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4508"},{"type":"REPORT","url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4508"},{"type":"REPORT","url":"https://github.com/gerbv/gerbv/issues/191"},{"type":"FIX","url":"https://github.com/gerbv/gerbv/commit/5517e22250e935dc7f86f64ad414aeae3dbcb36a"},{"type":"PACKAGE","url":"https://github.com/gerbv/gerbv"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gerbv/gerbv","events":[{"introduced":"67e1c901d52bba817bf45adab9a69e507094dd10"},{"fixed":"5517e22250e935dc7f86f64ad414aeae3dbcb36a"}],"database_specific":{"cpe":"cpe:2.3:a:gerbv_project:gerbv:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.4.0"},{"last_affected":"2.10.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4508.json","vanir_signatures_modified":"2026-08-12T14:51:16Z","vanir_signatures":[{"target":{"function":"parse_rs274x","file":"src/gerber.c"},"deprecated":false,"digest":{"length":18672,"function_hash":"151035615451760703062405692972615450079"},"id":"CVE-2023-4508-0116a0ce","signature_type":"Function","signature_version":"v1","source":"https://github.com/gerbv/gerbv/commit/5517e22250e935dc7f86f64ad414aeae3dbcb36a"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/gerbv/gerbv/commit/5517e22250e935dc7f86f64ad414aeae3dbcb36a","target":{"file":"src/gerbv.c","function":"gerbv_open_image"},"deprecated":false,"digest":{"length":3043,"function_hash":"316835375893895774265296963414226848314"},"id":"CVE-2023-4508-1439a561"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/gerbv/gerbv/commit/5517e22250e935dc7f86f64ad414aeae3dbcb36a","target":{"file":"src/gerb_file.c","function":"gerb_fclose"},"deprecated":false,"digest":{"function_hash":"224507333183998678441420757403130524877","length":351},"id":"CVE-2023-4508-d07af1bc"},{"deprecated":false,"digest":{"line_hashes":["110654009997180941423980672946933617556","93519695742929234972248247967781702943","164351579554195883919714629243269746093","249545581152385628296645943267019102802","71018871993307237044543925073371649827","245060291867875879469480287748125599040","278006322465934607559875501828309865606"],"threshold":0.9},"id":"CVE-2023-4508-e205e346","signature_type":"Line","signature_version":"v1","source":"https://github.com/gerbv/gerbv/commit/5517e22250e935dc7f86f64ad414aeae3dbcb36a","target":{"file":"src/gerb_file.c"}},{"id":"CVE-2023-4508-e52c04ac","signature_type":"Line","signature_version":"v1","source":"https://github.com/gerbv/gerbv/commit/5517e22250e935dc7f86f64ad414aeae3dbcb36a","target":{"file":"src/gerber.c"},"deprecated":false,"digest":{"line_hashes":["235595660592295673842803310219106351357","276515810842570065798854566001758807232","53269493975263036937840712408954927514"],"threshold":0.9}},{"deprecated":false,"digest":{"line_hashes":["270016216821826403122368986537879850246","320375393977192736691563660731710743496","227836266252018423921159651619380381439","192219027457121853103605147555883976342","278437225364960379636459867311425012539","89618090827882968569477121499526155425","314665246827481007757517552516868310559","278426758206429291952462161220159418293"],"threshold":0.9},"id":"CVE-2023-4508-e8d4b800","signature_type":"Line","signature_version":"v1","source":"https://github.com/gerbv/gerbv/commit/5517e22250e935dc7f86f64ad414aeae3dbcb36a","target":{"file":"src/gerbv.c"}},{"deprecated":false,"digest":{"function_hash":"116808694527722409682738758190605002107","length":1671},"id":"CVE-2023-4508-fd42a452","signature_type":"Function","signature_version":"v1","source":"https://github.com/gerbv/gerbv/commit/5517e22250e935dc7f86f64ad414aeae3dbcb36a","target":{"file":"src/gerb_file.c","function":"gerb_fopen"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}