CVE-2022-28506
Description
There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.
Risk Information
Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.07
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| SUSE-SU-2024:0786-1(Basesystem Module 15-SP5) libgif7-5.2.2-150000.4.13.1.x86_64.rpm | Linux |
| SUSE-SU-2024:0786-1(Basesystem Module 15-SP5) giflib-devel-5.2.2-150000.4.13.1.x86_64.rpm | Linux |
| SUSE-SU-2024:0786-1(Basesystem Module 15-SP5) libgif7-debuginfo-5.2.2-150000.4.13.1.x86_64.rpm | Linux |
| SUSE-SU-2024:0786-1(Basesystem Module 15-SP5) giflib-debugsource-5.2.2-150000.4.13.1.x86_64.rpm | Linux |
| library for GIF images (utilities) (USN-6824-1) giflib-tools_5.1.9-1ubuntu0.1_amd64.deb | Linux |
| library for GIF images (utilities) (USN-6824-1) giflib-tools_5.1.9-1ubuntu0.1_i386.deb | Linux |
| library for GIF images (utilities) (USN-6824-1) giflib-tools_5.1.9-2ubuntu0.1_amd64.deb | Linux |
| library for GIF images (utilities) (USN-6824-1) giflib-tools_5.1.9-2ubuntu0.1_i386.deb | Linux |
| library for GIF images (utilities) (USN-6824-1) giflib-tools_5.2.1-2.5ubuntu0.1_amd64.deb | Linux |
| library for GIF images (utilities) (USN-6824-1) giflib-tools_5.2.1-2.5ubuntu0.1_i386.deb | Linux |
| giflib Security Update (ALAS2023-2023-075) giflib-5.2.1-9.amzn2023.x86_64.rpm | Linux |
| giflib Security Update (ALAS2023-2023-075) giflib-devel-5.2.1-9.amzn2023.x86_64.rpm | Linux |
| giflib Security Update (ALAS2023-2023-075) giflib-utils-5.2.1-9.amzn2023.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234