Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-9vjz-q2h7-xueb

Summary giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c

Aliases

alias	CVE-2018-11490

Fixed_packages

url	pkg:deb/debian/giflib@5.1.9-1?distro=trixie
purl	pkg:deb/debian/giflib@5.1.9-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@5.1.9-1%3Fdistro=trixie

url pkg:deb/debian/giflib@5.1.9-2

purl pkg:deb/debian/giflib@5.1.9-2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-276w-96xc-5be1

vulnerability	VCID-c3n5-vvnd-3uc8

vulnerability	VCID-dv4g-b5vw-huf4

vulnerability	VCID-nz8n-htdu-k7gw

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@5.1.9-2

url pkg:deb/debian/giflib@5.1.9-2?distro=trixie

purl pkg:deb/debian/giflib@5.1.9-2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-276w-96xc-5be1

vulnerability	VCID-c3n5-vvnd-3uc8

vulnerability	VCID-dv4g-b5vw-huf4

vulnerability	VCID-nz8n-htdu-k7gw

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@5.1.9-2%3Fdistro=trixie

url pkg:deb/debian/giflib@5.2.1-2.5?distro=trixie

purl pkg:deb/debian/giflib@5.2.1-2.5?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-276w-96xc-5be1

vulnerability	VCID-c3n5-vvnd-3uc8

vulnerability	VCID-dv4g-b5vw-huf4

vulnerability	VCID-nz8n-htdu-k7gw

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@5.2.1-2.5%3Fdistro=trixie

url	pkg:deb/debian/giflib@5.2.2-1?distro=trixie
purl	pkg:deb/debian/giflib@5.2.2-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@5.2.2-1%3Fdistro=trixie

Affected_packages

url pkg:deb/debian/giflib@3.0-5

purl pkg:deb/debian/giflib@3.0-5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5byx-7b2n-hkdh

vulnerability	VCID-6uh1-fjn3-6kc7

vulnerability	VCID-9vjz-q2h7-xueb

vulnerability	VCID-cy1u-z2ns-c3fu

vulnerability	VCID-er2y-2gp1-6uge

vulnerability	VCID-p33t-h9n1-h3ck

vulnerability	VCID-qcj7-sct6-w7ey

vulnerability	VCID-wtm9-uuux-dqcc

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@3.0-5

url pkg:deb/debian/giflib@3.0-5.2

purl pkg:deb/debian/giflib@3.0-5.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5byx-7b2n-hkdh

vulnerability	VCID-6uh1-fjn3-6kc7

vulnerability	VCID-9vjz-q2h7-xueb

vulnerability	VCID-cy1u-z2ns-c3fu

vulnerability	VCID-er2y-2gp1-6uge

vulnerability	VCID-p33t-h9n1-h3ck

vulnerability	VCID-qcj7-sct6-w7ey

vulnerability	VCID-wtm9-uuux-dqcc

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@3.0-5.2

url pkg:deb/debian/giflib@3.0-6

purl pkg:deb/debian/giflib@3.0-6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5byx-7b2n-hkdh

vulnerability	VCID-6uh1-fjn3-6kc7

vulnerability	VCID-9vjz-q2h7-xueb

vulnerability	VCID-cy1u-z2ns-c3fu

vulnerability	VCID-er2y-2gp1-6uge

vulnerability	VCID-p33t-h9n1-h3ck

vulnerability	VCID-qcj7-sct6-w7ey

vulnerability	VCID-wtm9-uuux-dqcc

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@3.0-6

url pkg:deb/debian/giflib@3.0-11

purl pkg:deb/debian/giflib@3.0-11

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5byx-7b2n-hkdh

vulnerability	VCID-6uh1-fjn3-6kc7

vulnerability	VCID-9vjz-q2h7-xueb

vulnerability	VCID-cy1u-z2ns-c3fu

vulnerability	VCID-er2y-2gp1-6uge

vulnerability	VCID-p33t-h9n1-h3ck

vulnerability	VCID-qcj7-sct6-w7ey

vulnerability	VCID-wtm9-uuux-dqcc

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@3.0-11

url pkg:deb/debian/giflib@4.1.6-6

purl pkg:deb/debian/giflib@4.1.6-6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-9vjz-q2h7-xueb

vulnerability	VCID-cy1u-z2ns-c3fu

vulnerability	VCID-p33t-h9n1-h3ck

vulnerability	VCID-qcj7-sct6-w7ey

vulnerability	VCID-wtm9-uuux-dqcc

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@4.1.6-6

url pkg:deb/debian/giflib@4.1.6-9

purl pkg:deb/debian/giflib@4.1.6-9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-9vjz-q2h7-xueb

vulnerability	VCID-cy1u-z2ns-c3fu

vulnerability	VCID-p33t-h9n1-h3ck

vulnerability	VCID-qcj7-sct6-w7ey

vulnerability	VCID-wtm9-uuux-dqcc

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@4.1.6-9

url pkg:deb/debian/giflib@4.1.6-9%2Bdeb6u1

purl pkg:deb/debian/giflib@4.1.6-9%2Bdeb6u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-9vjz-q2h7-xueb

vulnerability	VCID-cy1u-z2ns-c3fu

vulnerability	VCID-p33t-h9n1-h3ck

vulnerability	VCID-qcj7-sct6-w7ey

vulnerability	VCID-wtm9-uuux-dqcc

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@4.1.6-9%252Bdeb6u1

url pkg:deb/debian/giflib@4.1.6-10%2Bdeb7u1

purl pkg:deb/debian/giflib@4.1.6-10%2Bdeb7u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-9vjz-q2h7-xueb

vulnerability	VCID-cy1u-z2ns-c3fu

vulnerability	VCID-p33t-h9n1-h3ck

vulnerability	VCID-qcj7-sct6-w7ey

vulnerability	VCID-wtm9-uuux-dqcc

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@4.1.6-10%252Bdeb7u1

url pkg:deb/debian/giflib@4.1.6-11

purl pkg:deb/debian/giflib@4.1.6-11

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-9vjz-q2h7-xueb

vulnerability	VCID-cy1u-z2ns-c3fu

vulnerability	VCID-p33t-h9n1-h3ck

vulnerability	VCID-qcj7-sct6-w7ey

vulnerability	VCID-wtm9-uuux-dqcc

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@4.1.6-11

url pkg:deb/debian/giflib@4.1.6-11%2Bdeb8u1

purl pkg:deb/debian/giflib@4.1.6-11%2Bdeb8u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-9vjz-q2h7-xueb

vulnerability	VCID-cy1u-z2ns-c3fu

vulnerability	VCID-p33t-h9n1-h3ck

vulnerability	VCID-qcj7-sct6-w7ey

vulnerability	VCID-wtm9-uuux-dqcc

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@4.1.6-11%252Bdeb8u1

url pkg:deb/debian/giflib@5.1.4-0.4

purl pkg:deb/debian/giflib@5.1.4-0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-9vjz-q2h7-xueb

vulnerability	VCID-p33t-h9n1-h3ck

vulnerability	VCID-wtm9-uuux-dqcc

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@5.1.4-0.4

url pkg:deb/debian/giflib@5.1.4-3

purl pkg:deb/debian/giflib@5.1.4-3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-9vjz-q2h7-xueb

vulnerability	VCID-p33t-h9n1-h3ck

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/giflib@5.1.4-3

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11490.json

reference_id

reference_type

scores

value	3.3
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11490.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2018-11490

reference_id

reference_type

scores

value	0.00225
scoring_system	epss
scoring_elements	0.45224
published_at	2026-04-01T12:55:00Z

value	0.00225
scoring_system	epss
scoring_elements	0.4536
published_at	2026-04-18T12:55:00Z

value	0.00225
scoring_system	epss
scoring_elements	0.45313
published_at	2026-04-12T12:55:00Z

value	0.00225
scoring_system	epss
scoring_elements	0.45315
published_at	2026-04-13T12:55:00Z

value	0.00225
scoring_system	epss
scoring_elements	0.45366
published_at	2026-04-16T12:55:00Z

value	0.00225
scoring_system	epss
scoring_elements	0.45304
published_at	2026-04-02T12:55:00Z

value	0.00225
scoring_system	epss
scoring_elements	0.45326
published_at	2026-04-04T12:55:00Z

value	0.00225
scoring_system	epss
scoring_elements	0.45268
published_at	2026-04-07T12:55:00Z

value	0.00225
scoring_system	epss
scoring_elements	0.45324
published_at	2026-04-09T12:55:00Z

value	0.00225
scoring_system	epss
scoring_elements	0.45345
published_at	2026-04-11T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2018-11490

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11490
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11490

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url	https://github.com/pts/sam2p/issues/38
reference_id
reference_type
scores
url	https://github.com/pts/sam2p/issues/38

reference_url	https://lists.debian.org/debian-lts-announce/2022/12/msg00008.html
reference_id
reference_type
scores
url	https://lists.debian.org/debian-lts-announce/2022/12/msg00008.html

reference_url	http://www.securityfocus.com/bid/104327
reference_id
reference_type
scores
url	http://www.securityfocus.com/bid/104327

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1583400
reference_id	1583400
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1583400

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904114
reference_id	904114
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904114

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:giflib_project:giflib::::::::
reference_id	cpe:2.3:a:giflib_project:giflib::::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:giflib_project:giflib::::::::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sam2p_project:sam2p:0.49.4:::::::*
reference_id	cpe:2.3:a:sam2p_project:sam2p:0.49.4:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:sam2p_project:sam2p:0.49.4:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm:::
reference_id	cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm:::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm:::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::
reference_id	cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:19.04:::::::*
reference_id	cpe:2.3:o:canonical:ubuntu_linux:19.04:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:19.04:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:10.0:::::::*
reference_id	cpe:2.3:o:debian:debian_linux:10.0:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:10.0:::::::*

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2018-11490

reference_id

CVE-2018-11490

reference_type

scores

value	6.8
scoring_system	cvssv2
scoring_elements	AV:N/AC:M/Au:N/C:P/I:P/A:P

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

url

https://nvd.nist.gov/vuln/detail/CVE-2018-11490

reference_url	https://usn.ubuntu.com/4107-1/
reference_id	USN-4107-1
reference_type
scores
url	https://usn.ubuntu.com/4107-1/

Weaknesses

cwe_id	122
name	Heap-based Buffer Overflow
description	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

cwe_id	129
name	Improper Validation of Array Index
description	The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

cwe_id	787
name	Out-of-bounds Write
description	The product writes data past the end, or before the beginning, of the intended buffer.

Exploits

Severity_range_score 3.3 - 8.8

Exploitability 0.5

Weighted_severity 7.9

Risk_score 4.0

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9vjz-q2h7-xueb

Vulnerability Instance