Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-11489

Опубликовано: 23 мая 2018
Источник: redhat
CVSS3: 3.3

Описание

The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index is not checked. This will lead to a denial of service or possibly unspecified other impact.

Отчет

This issue did not affect the versions of giflib as shipped with Red Hat Enterprise Linux 5, 6, an 7.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5giflibNot affected
Red Hat Enterprise Linux 6giflibNot affected
Red Hat Enterprise Linux 7giflibNot affected
Red Hat Enterprise Linux 8giflibNot affected
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) Operational ToolsphantomjsNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=1583399giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 7 лет назад

The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index is not checked. This will lead to a denial of service or possibly unspecified other impact.

CVSS3: 8.8
nvd
больше 7 лет назад

The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index is not checked. This will lead to a denial of service or possibly unspecified other impact.

CVSS3: 8.8
debian
больше 7 лет назад

The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly vers ...

CVSS3: 8.8
github
больше 3 лет назад

The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index is not checked. This will lead to a denial of service or possibly unspecified other impact.

3.3 Low

CVSS3