SUSE-SU-2024:0786-1: giflib&distro=openSUSE Leap 15.5

CVSS: UnknownPublished
Published 06-03-2024Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2024:0786-1 is a vulnerability in giflib&distro=openSUSE Leap 15.5 with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 3 · Downstream 0 · Related 3
CVE-2021-40633CVE-2022-28506CVE-2023-48161

Timeline

  1. 06-03-2024
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for giflib This update for giflib fixes the following issues: Update to version 5.2.2 * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880) * #138 Documentation for obsolete utilities still installed * #139: Typo in 'LZW image data' page ('110_2 = 4_10') * #140: Typo in 'LZW image data' page ('LWZ') * #141: Typo in 'Bits and bytes' page ('filed') * Note as already fixed SF issue #143: cannot compile under mingw * #144: giflib-5.2.1 cannot be build on windows and other platforms using c89 * #145: Remove manual pages installation for binaries that are not installed too * #146: [PATCH] Limit installed man pages to binaries, move giflib to section 7 * #147 [PATCH] Fixes to doc/whatsinagif/ content * #148: heap Out of Bound Read in gif2rgb.c:298 DumpScreen2RGB * Declared no-info on SF issue #150: There is a denial of service vulnerability in GIFLIB 5.2.1 * Declared Won't-fix on SF issue 149: Out of source builds no longer possible * #151: A heap-buffer-overflow in gif2rgb.c:294:45 * #152: Fix some typos on the html documentation and man pages * #153: Fix segmentation faults due to non correct checking for args * #154: Recover the giffilter manual page * #155: Add gifsponge docs * #157: An OutofMemory-Exception or Memory Leak in gif2rgb * #158: There is a null pointer problem in gif2rgb * #159 A heap-buffer-overflow in GIFLIB5.2.1 DumpScreen2RGB() in gif2rgb.c:298:45 * #163: detected memory leaks in openbsd_reallocarray giflib/openbsd-reallocarray.c * #164: detected memory leaks in GifMakeMapObject giflib/gifalloc.c * #166: a read zero page leads segment fault in getarg.c and memory leaks in gif2rgb.c and gifmalloc.c * #167: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function at Line 321 of gif2rgb.c

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse14 products
  • giflib&distro=SUSE Enterprise Storage 7.1< 5.2.2-150000.4.13.1
  • giflib&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 5.2.2-150000.4.13.1
  • giflib&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 5.2.2-150000.4.13.1
  • giflib&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 5.2.2-150000.4.13.1
  • giflib&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 5.2.2-150000.4.13.1
Opensuse1 product
  • giflib&distro=openSUSE Leap 15.5< 5.2.2-150000.4.13.1

2 vendors · 15 products

References

7 links