VulnerableCode Package Details - pkg:deb/debian/giflib@5.1.4-0.4

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:deb/debian/giflib@5.1.4-0.4

Essentials
History (15)

purl	pkg:deb/debian/giflib@5.1.4-0.4

Next non-vulnerable version	5.2.2-1
Latest non-vulnerable version	5.2.2-1
Risk	4.0

Vulnerabilities affecting this package (3)

Vulnerability	Summary	Fixed by
VCID-9vjz-q2h7-xueb Aliases: CVE-2018-11490	giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c	5.1.9-2 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-p33t-h9n1-h3ck Aliases: CVE-2019-15133	giflib: divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c	5.1.9-2 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-wtm9-uuux-dqcc Aliases: CVE-2016-3977	giflib: heap buffer overflow in gif2rgb	5.1.4-3 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (2)

Vulnerability	Summary	Aliases
VCID-cy1u-z2ns-c3fu	giflib: Use-after-free in gifcolor utility	CVE-2016-3177
VCID-qcj7-sct6-w7ey	giflib: Heap-based buffer overflow in giffix utility	CVE-2015-7555

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-15T21:58:04.909375+00:00	Debian Oval Importer	Affected by	VCID-9vjz-q2h7-xueb	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T21:21:09.098584+00:00	Debian Oval Importer	Fixing	VCID-qcj7-sct6-w7ey	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T20:10:30.049227+00:00	Debian Oval Importer	Affected by	VCID-p33t-h9n1-h3ck	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T20:08:04.398631+00:00	Debian Oval Importer	Fixing	VCID-cy1u-z2ns-c3fu	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-15T16:07:37.557277+00:00	Debian Oval Importer	Affected by	VCID-wtm9-uuux-dqcc	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.4.0
2026-04-11T21:36:21.398721+00:00	Debian Oval Importer	Affected by	VCID-9vjz-q2h7-xueb	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T21:00:42.559235+00:00	Debian Oval Importer	Fixing	VCID-qcj7-sct6-w7ey	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T19:52:12.955568+00:00	Debian Oval Importer	Affected by	VCID-p33t-h9n1-h3ck	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T19:49:44.823584+00:00	Debian Oval Importer	Fixing	VCID-cy1u-z2ns-c3fu	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-11T15:55:07.985558+00:00	Debian Oval Importer	Affected by	VCID-wtm9-uuux-dqcc	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.3.0
2026-04-08T21:14:29.241453+00:00	Debian Oval Importer	Affected by	VCID-9vjz-q2h7-xueb	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T20:39:57.655297+00:00	Debian Oval Importer	Fixing	VCID-qcj7-sct6-w7ey	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T19:34:29.402292+00:00	Debian Oval Importer	Affected by	VCID-p33t-h9n1-h3ck	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T19:32:16.526305+00:00	Debian Oval Importer	Fixing	VCID-cy1u-z2ns-c3fu	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0
2026-04-08T15:48:22.370144+00:00	Debian Oval Importer	Affected by	VCID-wtm9-uuux-dqcc	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	38.1.0