VulnerableCode Package Details - pkg:deb/debian/giflib@3.0-5

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:deb/debian/giflib@3.0-5

Essentials
History (24)

purl	pkg:deb/debian/giflib@3.0-5

Next non-vulnerable version	5.2.2-1
Latest non-vulnerable version	5.2.2-1
Risk	4.0

Vulnerabilities affecting this package (8)

Vulnerability	Summary	Fixed by
VCID-5byx-7b2n-hkdh Aliases: CVE-2005-3350	giflib may dereference NULL or write out of bounds when processing malformed images, potentially resulting in Denial of Service or arbitrary code execution.	4.1.6-6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-6uh1-fjn3-6kc7 Aliases: CVE-2005-2974	giflib may dereference NULL or write out of bounds when processing malformed images, potentially resulting in Denial of Service or arbitrary code execution.	4.1.6-6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-9vjz-q2h7-xueb Aliases: CVE-2018-11490	giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c	5.1.9-2 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-cy1u-z2ns-c3fu Aliases: CVE-2016-3177	giflib: Use-after-free in gifcolor utility	5.1.4-0.4 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-er2y-2gp1-6uge Aliases: CVE-2018-11489	giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c	4.1.6-6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-p33t-h9n1-h3ck Aliases: CVE-2019-15133	giflib: divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c	5.1.9-2 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-qcj7-sct6-w7ey Aliases: CVE-2015-7555	giflib: Heap-based buffer overflow in giffix utility	5.1.4-0.4 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-wtm9-uuux-dqcc Aliases: CVE-2016-3977	giflib: heap buffer overflow in gif2rgb	5.1.4-3 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-15T21:58:04.873784+00:00	Debian Oval Importer	Affected by	VCID-9vjz-q2h7-xueb	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T21:21:09.057342+00:00	Debian Oval Importer	Affected by	VCID-qcj7-sct6-w7ey	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T20:10:30.010618+00:00	Debian Oval Importer	Affected by	VCID-p33t-h9n1-h3ck	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T20:08:04.366502+00:00	Debian Oval Importer	Affected by	VCID-cy1u-z2ns-c3fu	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T19:34:08.379965+00:00	Debian Oval Importer	Affected by	VCID-6uh1-fjn3-6kc7	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T18:35:27.754211+00:00	Debian Oval Importer	Affected by	VCID-5byx-7b2n-hkdh	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T16:07:37.521257+00:00	Debian Oval Importer	Affected by	VCID-wtm9-uuux-dqcc	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T15:36:33.868800+00:00	Debian Oval Importer	Affected by	VCID-er2y-2gp1-6uge	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-11T21:36:21.360094+00:00	Debian Oval Importer	Affected by	VCID-9vjz-q2h7-xueb	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T21:00:42.524034+00:00	Debian Oval Importer	Affected by	VCID-qcj7-sct6-w7ey	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T19:52:12.908540+00:00	Debian Oval Importer	Affected by	VCID-p33t-h9n1-h3ck	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T19:49:44.774759+00:00	Debian Oval Importer	Affected by	VCID-cy1u-z2ns-c3fu	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T19:16:52.664072+00:00	Debian Oval Importer	Affected by	VCID-6uh1-fjn3-6kc7	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T18:20:06.280515+00:00	Debian Oval Importer	Affected by	VCID-5byx-7b2n-hkdh	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T15:55:07.945792+00:00	Debian Oval Importer	Affected by	VCID-wtm9-uuux-dqcc	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T15:24:29.751596+00:00	Debian Oval Importer	Affected by	VCID-er2y-2gp1-6uge	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-08T21:14:29.193088+00:00	Debian Oval Importer	Affected by	VCID-9vjz-q2h7-xueb	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T20:39:57.607717+00:00	Debian Oval Importer	Affected by	VCID-qcj7-sct6-w7ey	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T19:34:29.359707+00:00	Debian Oval Importer	Affected by	VCID-p33t-h9n1-h3ck	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T19:32:16.478782+00:00	Debian Oval Importer	Affected by	VCID-cy1u-z2ns-c3fu	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T19:00:45.791730+00:00	Debian Oval Importer	Affected by	VCID-6uh1-fjn3-6kc7	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T18:06:10.428159+00:00	Debian Oval Importer	Affected by	VCID-5byx-7b2n-hkdh	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T15:48:22.319787+00:00	Debian Oval Importer	Affected by	VCID-wtm9-uuux-dqcc	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T15:19:00.057599+00:00	Debian Oval Importer	Affected by	VCID-er2y-2gp1-6uge	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0