An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. In the function agg::cell_aa::not_equal, dx is assigned to (x2 - x1). If dx >= dx_limit, which is (16384 << poly_subpixel_shift), this function will call itself recursively. There can be a situation where (x2 - x1) is always bigger than dx_limit during the recursion, leading to continual stack consumption.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3376 advisory.

  - An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. In the     function agg::cell_aa::not_equal, dx is assigned to (x2 - x1). If dx >= dx_limit, which is (16384 <<     poly_subpixel_shift), this function will call itself recursively. There can be a situation where (x2 - x1)     is always bigger than dx_limit during the recursion, leading to continual stack consumption.
    (CVE-2019-6245)

  - An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based     buffer overflow bug in svgpp_agg_render may lead to code execution. In the render_scanlines_aa_solid     function, the blend_hline function is called repeatedly multiple times. blend_hline is equivalent to a     loop containing write operations. Each call writes a piece of heap data, and multiple calls overwrite the     data in the heap. (CVE-2019-6247)

  - In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the     XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null     pointer reference behind the renderDocument function. (CVE-2021-44960)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2872 advisory.

  - An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. In the     function agg::cell_aa::not_equal, dx is assigned to (x2 - x1). If dx >= dx_limit, which is (16384 <<     poly_subpixel_shift), this function will call itself recursively. There can be a situation where (x2 - x1)     is always bigger than dx_limit during the recursion, leading to continual stack consumption.
    (CVE-2019-6245)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A stack overflow vulnerability was discovered in AGG, the AntiGrain Geometry graphical toolkit, that may lead to code execution if a malformed file is processed. Since AGG only provides a static library, the desmume and exactimage packages were rebuilt against the latest security update.

For Debian 8 'Jessie', this problem has been fixed in version 2.5+dfsg1-9+deb8u1.

We recommend that you upgrade your agg packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
173788	Debian DLA-3376-1 : svgpp - LTS security update	Nessus	Debian Local Security Checks	high
156418	Debian DLA-2872-1 : agg - LTS security update	Nessus	Debian Local Security Checks	high
121553	Debian DLA-1656-1 : agg security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2019-6245

high

Tenable Plugins

high

high

high