Lucene search

K
mageiaGentoo FoundationMGASA-2024-0202
HistoryJun 02, 2024 - 6:29 a.m.

Updated gifsicle packages fix security vulnerability

2024-06-0206:29:33
Gentoo Foundation
advisories.mageia.org
8
gifsicle package
security vulnerability
resize_stream
floating point exception
cve-2023-46009
unix

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

31.1%

gifsicle-1.94 was found to have a floating point exception (FPE) vulnerability via resize_stream at src/xform.c. (CVE-2023-46009)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchgifsicle< 1.95-1gifsicle-1.95-1.mga9

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

31.1%