Lucene search

K
redosRedosROS-20230918-01
HistorySep 18, 2023 - 12:00 a.m.

ROS-20230918-01

2023-09-1800:00:00
redos.red-soft.ru
9
giflib
vulnerability
dumpscreen2rgb
getarg.c
memory corruption
heap overflow
unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

36.0%

GIFLIB GIF handling library vulnerability is related to a bug in the DumpScreen2RGB() function in the
gif2rgb.c:298:45. Exploitation of the vulnerability could allow an attacker acting remotely to cause a
a heap buffer overflow.

A vulnerability in the GIF library for handling GIF files GIFLIB is related to a segmentation error via the component
getarg.c. Exploitation of the vulnerability could allow an attacker to cause memory corruption.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64giflib<= 5.2.1-3UNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

36.0%