6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2023-37769

CVE-2023-37769: stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component...

stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine_inner at /pixman-combine-float.c.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2023-37769

CVE-2023-37769:

6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability description directly points to the function 'combine_inner' in the file '/pixman-combine-float.c' and the commit 'e4c878' as the source of the FPE vulnerability. While I could not fetch the commit details to analyze the patch directly, the provided information is specific enough to identify this function as vulnerable. The confidence is medium because I haven't been able to inspect the code changes in the specified commit. I tried to fetch the commit information from the GitLab issue URL, but it was protected by a bot challenge. The Google search results also did not provide direct links to commits or patches related to CVE-2023-37769 and the specified commit e4c878. Therefore, the analysis relies solely on the provided vulnerability description and details. If commit information becomes available, a more precise analysis with higher confidence can be performed by examining the code changes directly within the identified function and file. The CWE classification (CWE-369: Divide By Zero) further supports the likelihood of an FPE within a function named 'combine_inner', which might involve arithmetic operations susceptible to such errors if input is not properly validated or handled, especially in a floating-point context as suggested by the filename 'pixman-combine-float.c'

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.