Search for packages
Package details: pkg:deb/debian/netsurf@3.2%2Bdfsg-2
purl pkg:deb/debian/netsurf@3.2%2Bdfsg-2
Next non-vulnerable version 3.6-3.1
Latest non-vulnerable version 3.6-3.1
Risk 10.0
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-141q-nxrb-aaaa
Aliases:
CVE-2015-7506
The gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted LZW stream in a GIF file.
3.6-3.1
Affected by 0 other vulnerabilities.
VCID-2n1m-xefr-aaah
Aliases:
CVE-2015-7507
libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table to the (1) bmp_decode_rgb or (2) bmp_decode_rle function.
3.6-3.1
Affected by 0 other vulnerabilities.
VCID-4qww-3wn9-aaag
Aliases:
CVE-2014-3566
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
3.6-3.1
Affected by 0 other vulnerabilities.
VCID-g9x9-6gp2-aaah
Aliases:
CVE-2015-7508
Heap-based buffer overflow in the bmp_decode_rle function in libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the last row of RLE data in a crafted BMP file.
3.6-3.1
Affected by 0 other vulnerabilities.
VCID-hq6u-kq61-aaap
Aliases:
CVE-2015-7505
Stack-based buffer overflow in the gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LZW stream in a GIF file.
3.6-3.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T18:56:01.369965+00:00 Debian Oval Importer Affected by VCID-g9x9-6gp2-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T04:39:33.798082+00:00 Debian Oval Importer Affected by VCID-141q-nxrb-aaaa None 36.1.3
2025-06-21T04:29:28.988785+00:00 Debian Oval Importer Affected by VCID-2n1m-xefr-aaah None 36.1.3
2025-06-21T04:02:13.849479+00:00 Debian Oval Importer Affected by VCID-hq6u-kq61-aaap None 36.1.3
2025-06-21T02:42:29.152919+00:00 Debian Oval Importer Affected by VCID-g9x9-6gp2-aaah None 36.1.3
2025-06-21T02:39:19.735807+00:00 Debian Oval Importer Affected by VCID-4qww-3wn9-aaag None 36.1.3
2025-06-08T12:23:26.981200+00:00 Debian Oval Importer Affected by VCID-hq6u-kq61-aaap https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T11:25:30.482379+00:00 Debian Oval Importer Affected by VCID-g9x9-6gp2-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-07T22:16:19.881898+00:00 Debian Oval Importer Affected by VCID-141q-nxrb-aaaa None 36.1.0
2025-06-07T22:05:51.278640+00:00 Debian Oval Importer Affected by VCID-2n1m-xefr-aaah None 36.1.0
2025-06-07T21:37:34.662621+00:00 Debian Oval Importer Affected by VCID-hq6u-kq61-aaap None 36.1.0
2025-06-07T20:07:52.411808+00:00 Debian Oval Importer Affected by VCID-g9x9-6gp2-aaah None 36.1.0
2025-06-07T20:04:09.123967+00:00 Debian Oval Importer Affected by VCID-4qww-3wn9-aaag None 36.1.0
2025-04-12T22:22:43.921817+00:00 Debian Oval Importer Affected by VCID-141q-nxrb-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T22:22:14.836404+00:00 Debian Oval Importer Affected by VCID-4qww-3wn9-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T21:11:28.821008+00:00 Debian Oval Importer Affected by VCID-2n1m-xefr-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T18:09:30.894500+00:00 Debian Oval Importer Affected by VCID-hq6u-kq61-aaap https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T17:09:37.758049+00:00 Debian Oval Importer Affected by VCID-g9x9-6gp2-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-07T20:47:50.791177+00:00 Debian Oval Importer Affected by VCID-141q-nxrb-aaaa None 36.0.0
2025-04-07T20:37:08.354605+00:00 Debian Oval Importer Affected by VCID-2n1m-xefr-aaah None 36.0.0
2025-04-07T20:07:06.870426+00:00 Debian Oval Importer Affected by VCID-hq6u-kq61-aaap None 36.0.0
2025-04-07T18:44:48.950568+00:00 Debian Oval Importer Affected by VCID-g9x9-6gp2-aaah None 36.0.0
2025-04-07T18:41:32.959096+00:00 Debian Oval Importer Affected by VCID-4qww-3wn9-aaag None 36.0.0