Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-19668

Опубликовано: 20 нояб. 2020
Источник: debian
EPSS Низкий

Описание

Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.6.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libsixelfixed1.10.3-1package
libsixelno-dsabullseyepackage
libsixelno-dsabusterpackage
libsixelno-dsastretchpackage

Примечания

  • https://github.com/saitoha/libsixel/issues/136

  • https://github.com/libsixel/libsixel/issues/7

  • https://github.com/libsixel/libsixel/pull/8

  • https://github.com/libsixel/libsixel/commit/05e5d21d065c663ec7a83d185974f4c252314968 (v1.9.0)

  • Since 1.10.3-1 the Debian package moved from https://github.com/saitoha/libsixel to https://github.com/libsixel/libsixel fork

EPSS

Процентиль: 59%
0.00856
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 6 лет назад

Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.6.

CVSS3: 6.5
nvd
почти 6 лет назад

Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.6.

CVSS3: 6.5
github
больше 4 лет назад

Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.6.

CVSS3: 6.5
altlinux
больше 3 лет назад

ALT-PU-2023-1540: package `libsixel` update to version 1.10.3-alt1

CVSS3: 8.8
altlinux
больше 3 лет назад

ALT-PU-2023-1591: package `libsixel` update to version 1.10.3-alt1

EPSS

Процентиль: 59%
0.00856
Низкий