CVE-2017-18120
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2017-18120
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-18120.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-18120
- Related
- Published
- 2018-02-02T09:29:00Z
- Modified
- 2025-01-15T01:25:39.371945Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A double-free bug in the readgif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-service attack or unspecified other impact via a maliciously crafted file, because lastname is mishandled, a different vulnerability than CVE-2017-1000421.
- References
-
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878739
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881120
- https://github.com/kohler/gifsicle/commit/118a46090c50829dc543179019e6140e1235f909
- https://github.com/kohler/gifsicle/issues/117
- https://security-tracker.debian.org/tracker/CVE-2017-18120
Affected packages
Debian:11 / gifsicle
Package
- Name
- gifsicle
- Purl
- pkg:deb/debian/gifsicle?arch=source
Debian:12 / gifsicle
Package
- Name
- gifsicle
- Purl
- pkg:deb/debian/gifsicle?arch=source
Debian:13 / gifsicle
Package
- Name
- gifsicle
- Purl
- pkg:deb/debian/gifsicle?arch=source
Git / github.com/kohler/gifsicle
Affected ranges
- Type
- GIT
- Repo
- https://github.com/kohler/gifsicle
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
Affected versions
v1.*
v1.10
v1.10b1
v1.11
v1.11.1
v1.14.1
v1.15b
v1.18
v1.19
v1.21
v1.22
v1.24
v1.25
v1.26
v1.30
v1.35
v1.37
v1.38
v1.39
v1.40
v1.42
v1.43
v1.44
v1.45
v1.46
v1.47
v1.48
v1.50
v1.51
v1.52
v1.53
v1.54
v1.55
v1.56
v1.57
v1.58
v1.59
v1.60
v1.61
v1.62
v1.63
v1.64
v1.65
v1.66
v1.67
v1.68
v1.69
v1.70
v1.71
v1.72
v1.73
v1.74
v1.75
v1.76
v1.77
v1.78
v1.79
v1.80
v1.81
v1.82
v1.84
v1.85
v1.86
v1.87
v1.88
v1.89
v1.90