Skip to content
OpenAdvisories
Medium USN-6760-1 1 CVE

gerbv vulnerability

Published Apr 30, 2024 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

George-Andrei Iosif and David Fernandez Gonzalez discovered that Gerbv did
not properly initialize a data structure when parsing certain nested
RS-274X format files. If a user were tricked into opening a specially
crafted file, an attacker could possibly use this issue to cause a denial
of service (application crash).

Fixed packages 5

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS gerbv 2.7.0-1ubuntu0.2
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS gerbv 2.6.0-1ubuntu0.14.04.1~esm2
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS gerbv 2.6.0-1ubuntu0.16.04.1~esm2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS gerbv 2.6.1-3ubuntu0.1~esm2
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS gerbv 2.8.2-1ubuntu0.1~esm2

Vulnerabilities 1

  • Medium 5.5
    CVE-2023-4508

    Denial of Service in Gerbv

    A user able to control file input to Gerbv, between versions 2.4.0 and 2.10.0, can cause a crash and cause denial-of-service with a specially crafted Gerber RS-274X file.

    Gerbv Gerbv gerbv gerbv Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-4508