VulnerableCode Package Details - pkg:deb/debian/giflib@3.0-5.2

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:deb/debian/giflib@3.0-5.2

Essentials
History (24)

purl	pkg:deb/debian/giflib@3.0-5.2

Next non-vulnerable version	5.2.2-1
Latest non-vulnerable version	5.2.2-1
Risk	4.0

Vulnerabilities affecting this package (8)

Vulnerability	Summary	Fixed by
VCID-5byx-7b2n-hkdh Aliases: CVE-2005-3350	giflib may dereference NULL or write out of bounds when processing malformed images, potentially resulting in Denial of Service or arbitrary code execution.	4.1.6-6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-6uh1-fjn3-6kc7 Aliases: CVE-2005-2974	giflib may dereference NULL or write out of bounds when processing malformed images, potentially resulting in Denial of Service or arbitrary code execution.	4.1.6-6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-9vjz-q2h7-xueb Aliases: CVE-2018-11490	giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c	5.1.9-2 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-cy1u-z2ns-c3fu Aliases: CVE-2016-3177	giflib: Use-after-free in gifcolor utility	5.1.4-0.4 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-er2y-2gp1-6uge Aliases: CVE-2018-11489	giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c	4.1.6-6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-p33t-h9n1-h3ck Aliases: CVE-2019-15133	giflib: divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c	5.1.9-2 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-qcj7-sct6-w7ey Aliases: CVE-2015-7555	giflib: Heap-based buffer overflow in giffix utility	5.1.4-0.4 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-wtm9-uuux-dqcc Aliases: CVE-2016-3977	giflib: heap buffer overflow in gif2rgb	5.1.4-3 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-15T21:58:04.877091+00:00	Debian Oval Importer	Affected by	VCID-9vjz-q2h7-xueb	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T21:21:09.062029+00:00	Debian Oval Importer	Affected by	VCID-qcj7-sct6-w7ey	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T20:10:30.014471+00:00	Debian Oval Importer	Affected by	VCID-p33t-h9n1-h3ck	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T20:08:04.369855+00:00	Debian Oval Importer	Affected by	VCID-cy1u-z2ns-c3fu	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T19:34:08.384117+00:00	Debian Oval Importer	Affected by	VCID-6uh1-fjn3-6kc7	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T18:35:27.757709+00:00	Debian Oval Importer	Affected by	VCID-5byx-7b2n-hkdh	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T16:07:37.525102+00:00	Debian Oval Importer	Affected by	VCID-wtm9-uuux-dqcc	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T15:36:33.871969+00:00	Debian Oval Importer	Affected by	VCID-er2y-2gp1-6uge	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-11T21:36:21.364028+00:00	Debian Oval Importer	Affected by	VCID-9vjz-q2h7-xueb	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T21:00:42.528034+00:00	Debian Oval Importer	Affected by	VCID-qcj7-sct6-w7ey	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T19:52:12.913366+00:00	Debian Oval Importer	Affected by	VCID-p33t-h9n1-h3ck	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T19:49:44.782767+00:00	Debian Oval Importer	Affected by	VCID-cy1u-z2ns-c3fu	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T19:16:52.668188+00:00	Debian Oval Importer	Affected by	VCID-6uh1-fjn3-6kc7	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T18:20:06.284549+00:00	Debian Oval Importer	Affected by	VCID-5byx-7b2n-hkdh	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T15:55:07.949925+00:00	Debian Oval Importer	Affected by	VCID-wtm9-uuux-dqcc	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T15:24:29.755854+00:00	Debian Oval Importer	Affected by	VCID-er2y-2gp1-6uge	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-08T21:14:29.197407+00:00	Debian Oval Importer	Affected by	VCID-9vjz-q2h7-xueb	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T20:39:57.612352+00:00	Debian Oval Importer	Affected by	VCID-qcj7-sct6-w7ey	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T19:34:29.364057+00:00	Debian Oval Importer	Affected by	VCID-p33t-h9n1-h3ck	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T19:32:16.483302+00:00	Debian Oval Importer	Affected by	VCID-cy1u-z2ns-c3fu	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T19:00:45.796366+00:00	Debian Oval Importer	Affected by	VCID-6uh1-fjn3-6kc7	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T18:06:10.433989+00:00	Debian Oval Importer	Affected by	VCID-5byx-7b2n-hkdh	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T15:48:22.324321+00:00	Debian Oval Importer	Affected by	VCID-wtm9-uuux-dqcc	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T15:19:00.064492+00:00	Debian Oval Importer	Affected by	VCID-er2y-2gp1-6uge	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0