CVE-2017-1000421
Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in t ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | gifsicle | 1.90-1 |
| debian 12 | gifsicle | 1.90-1 |
| debian 13 | gifsicle | 1.90-1 |
| debian 14 | gifsicle | 1.90-1 |
| debian 7 | gifsicle | 1.67-1.1~deb7u1 |
| debian 8 | gifsicle | 1.86-1+deb8u1 |
| debian 9 | gifsicle | 1.88-3+deb9u1 |
| echo | gifsicle | 1.90-1 |
| ubuntu 14.04-ESM | gifsicle | 1.78-1ubuntu0.1~esm1 |
| ubuntu 16.04-ESM | gifsicle | 1.88-1ubuntu0.1~esm1 |
Referanslar
- https://github.com/kohler/gifsicle/commit/81fd7823f6d9c85ab598bc850e40382068361185
- https://github.com/kohler/gifsicle/issues/114
- https://lists.debian.org/debian-lts-announce/2018/01/msg00006.html
- https://ubuntu.com/security/notices/USN-4803-1
- https://www.cve.org/CVERecord?id=CVE-2017-1000421
- https://www.debian.org/security/2018/dsa-4084