suse · CVE-2016-3977

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-3977 severity moderate: SUSE including 273 source package names (10.1.33-openjdk11-59.4:libgif7-5.2.1-150000.4.8.1, 10.1.33-openjdk17-59.4:libgif7-5.2.1-150000.4.8.1, …), 391 product×package rows across 75 product lines (Container bci/openjdk, Container bci/openjdk-devel, … (75 product lines)): Known Affected 231, Fixed 160.

Description:

Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file.