Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia: 2019-0096 Critical: Giflib Buffer Overflow Issue

mageia
Calendar Grey February 20, 2019
Dist Mageia Esm H88
MGASA-2019-0096 - Updated giflib packages fix security vulnerability Publication date: 20 Feb 2019 U
Null dereferences in main() of gifclrmp

Summary

Null dereferences in main() of gifclrmp. Heap Buffer Overflow-2 in function DGifDecompressLine() in cgif.c. CVE-2018-11490) Segmentation fault in PrintCodeBlock. Segmentation fault of giftool reading a crafted file. Floating point exception in giftext utility. Heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317. Ineffective bounds check in DGifSlurp. GIFLIB 5.1.4: DGifSlurp fails on empty comment.

References

- https://bugs.mageia.org/show_bug.cgi?id=24378

-

- https://www.cve.org/CVERecord?id=CVE-2018-11490

Topics%20covered

Topics Covered

security advisory buffer overflow critical heap overflow segmentation fault giflib Mageia

Resolution

SRPMS

- 6/core/giflib-5.1.6-1.mga6

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 20 Feb 2019
URL: https://advisories.mageia.org/MGASA-2019-0096.html
Type: security
CVE: CVE-2018-11490

Topics%20covered

Topics Covered

security advisory buffer overflow critical heap overflow segmentation fault giflib Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here