{
  "document": {
    "aggregate_severity": {
      "text": "Medium"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/cloudlinux7els/vex/2023/cve-2023-37769-els_os-cloudlinux7els.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-10-23T22:30:58Z",
      "generator": {
        "date": "2026-10-23T22:30:58Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CVE-2023-37769-ELS_OS-CLOUDLINUX7ELS",
      "initial_release_date": "2023-07-17T20:15:00Z",
      "revision_history": [
        {
          "date": "2023-07-17T20:15:00Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-23T22:30:58Z",
          "number": "2",
          "summary": "Official Publication"
        }
      ],
      "status": "final",
      "version": "2"
    },
    "title": "Security update on CVE-2023-37769"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "CloudLinux 7",
                "product": {
                  "name": "CloudLinux 7",
                  "product_id": "CloudLinux-7",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:cloudlinux:cloudlinux:7:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "CloudLinux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pixman-devel-0:0.34.0-1.el7.x86_64",
                "product": {
                  "name": "pixman-devel-0:0.34.0-1.el7.x86_64",
                  "product_id": "pixman-devel-0:0.34.0-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/pixman-devel@0.34.0-1.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pixman-0:0.34.0-1.el7.x86_64",
                "product": {
                  "name": "pixman-0:0.34.0-1.el7.x86_64",
                  "product_id": "pixman-0:0.34.0-1.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/pixman@0.34.0-1.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pixman-devel-0:0.34.0-1.el7.i686",
                "product": {
                  "name": "pixman-devel-0:0.34.0-1.el7.i686",
                  "product_id": "pixman-devel-0:0.34.0-1.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/pixman-devel@0.34.0-1.el7?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pixman-0:0.34.0-1.el7.i686",
                "product": {
                  "name": "pixman-0:0.34.0-1.el7.i686",
                  "product_id": "pixman-0:0.34.0-1.el7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/pixman@0.34.0-1.el7?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Cloud Linux Software, Inc."
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pixman-devel-0:0.34.0-1.el7.tuxcare.els1.x86_64",
                "product": {
                  "name": "pixman-devel-0:0.34.0-1.el7.tuxcare.els1.x86_64",
                  "product_id": "pixman-devel-0:0.34.0-1.el7.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/pixman-devel@0.34.0-1.el7.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pixman-0:0.34.0-1.el7.tuxcare.els1.x86_64",
                "product": {
                  "name": "pixman-0:0.34.0-1.el7.tuxcare.els1.x86_64",
                  "product_id": "pixman-0:0.34.0-1.el7.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/pixman@0.34.0-1.el7.tuxcare.els1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "pixman-devel-0:0.34.0-1.el7.tuxcare.els1.i686",
                "product": {
                  "name": "pixman-devel-0:0.34.0-1.el7.tuxcare.els1.i686",
                  "product_id": "pixman-devel-0:0.34.0-1.el7.tuxcare.els1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/pixman-devel@0.34.0-1.el7.tuxcare.els1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pixman-0:0.34.0-1.el7.tuxcare.els1.i686",
                "product": {
                  "name": "pixman-0:0.34.0-1.el7.tuxcare.els1.i686",
                  "product_id": "pixman-0:0.34.0-1.el7.tuxcare.els1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/cloudlinux/pixman@0.34.0-1.el7.tuxcare.els1?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "CloudLinux"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pixman-devel-0:0.34.0-1.el7.tuxcare.els1.x86_64 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.tuxcare.els1.x86_64"
        },
        "product_reference": "pixman-devel-0:0.34.0-1.el7.tuxcare.els1.x86_64",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pixman-devel-0:0.34.0-1.el7.x86_64 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.x86_64"
        },
        "product_reference": "pixman-devel-0:0.34.0-1.el7.x86_64",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pixman-devel-0:0.34.0-1.el7.tuxcare.els1.i686 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.tuxcare.els1.i686"
        },
        "product_reference": "pixman-devel-0:0.34.0-1.el7.tuxcare.els1.i686",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pixman-devel-0:0.34.0-1.el7.i686 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.i686"
        },
        "product_reference": "pixman-devel-0:0.34.0-1.el7.i686",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pixman-0:0.34.0-1.el7.tuxcare.els1.x86_64 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:pixman-0:0.34.0-1.el7.tuxcare.els1.x86_64"
        },
        "product_reference": "pixman-0:0.34.0-1.el7.tuxcare.els1.x86_64",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pixman-0:0.34.0-1.el7.x86_64 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:pixman-0:0.34.0-1.el7.x86_64"
        },
        "product_reference": "pixman-0:0.34.0-1.el7.x86_64",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pixman-0:0.34.0-1.el7.tuxcare.els1.i686 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:pixman-0:0.34.0-1.el7.tuxcare.els1.i686"
        },
        "product_reference": "pixman-0:0.34.0-1.el7.tuxcare.els1.i686",
        "relates_to_product_reference": "CloudLinux-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pixman-0:0.34.0-1.el7.i686 as a component of CloudLinux 7",
          "product_id": "CloudLinux-7:pixman-0:0.34.0-1.el7.i686"
        },
        "product_reference": "pixman-0:0.34.0-1.el7.i686",
        "relates_to_product_reference": "CloudLinux-7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-37769",
      "cwe": {
        "id": "CWE-369",
        "name": "Divide By Zero"
      },
      "notes": [
        {
          "category": "description",
          "text": "stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine_inner at /pixman-combine-float.c.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "known_affected": [
          "CloudLinux-7:pixman-0:0.34.0-1.el7.i686",
          "CloudLinux-7:pixman-0:0.34.0-1.el7.tuxcare.els1.i686",
          "CloudLinux-7:pixman-0:0.34.0-1.el7.tuxcare.els1.x86_64",
          "CloudLinux-7:pixman-0:0.34.0-1.el7.x86_64",
          "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.i686",
          "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.tuxcare.els1.i686",
          "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.tuxcare.els1.x86_64",
          "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-37769"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/pixman/pixman/-/issues/76",
          "url": "https://gitlab.freedesktop.org/pixman/pixman/-/issues/76"
        }
      ],
      "release_date": "2023-07-17T20:15:00Z",
      "remediations": [
        {
          "category": "no_fix_planned",
          "date": "2026-10-15T15:14:45.615403Z",
          "details": "CVE-2023-37769 is a divide‑by‑zero/FPE in pixman’s stress‑test harness (combine_inner in pixman‑combine‑float.c); the affected stress‑test binary isn’t shipped or enabled in production builds, so the vulnerable code path is not present on deployed systems. Even if pixman is installed, triggering this requires user interaction with attacker‑supplied image data and results only in a crash of an unprivileged process (no confidentiality or integrity impact). Given these prerequisites and the DoS‑only outcome, this issue can be safely deprioritized for centrally managed enterprise VM/server environments.",
          "product_ids": [
            "CloudLinux-7:pixman-0:0.34.0-1.el7.i686",
            "CloudLinux-7:pixman-0:0.34.0-1.el7.tuxcare.els1.i686",
            "CloudLinux-7:pixman-0:0.34.0-1.el7.tuxcare.els1.x86_64",
            "CloudLinux-7:pixman-0:0.34.0-1.el7.x86_64",
            "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.i686",
            "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.tuxcare.els1.i686",
            "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.tuxcare.els1.x86_64",
            "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CloudLinux-7:pixman-0:0.34.0-1.el7.i686",
            "CloudLinux-7:pixman-0:0.34.0-1.el7.tuxcare.els1.i686",
            "CloudLinux-7:pixman-0:0.34.0-1.el7.tuxcare.els1.x86_64",
            "CloudLinux-7:pixman-0:0.34.0-1.el7.x86_64",
            "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.i686",
            "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.tuxcare.els1.i686",
            "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.tuxcare.els1.x86_64",
            "CloudLinux-7:pixman-devel-0:0.34.0-1.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    }
  ]
}