CVE-2019-15133

Medium

Description

In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of the ImageSize data structure is equal to zero.

SeverityMedium
CVSS6.5
Exploit probability—
ProductGiflib
PublishedAug 17, 2019
First seenAug 17, 2019

How to fix

Update
  • giflib_project giflib5.1.7 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
giflib_project giflibv < 5.1.75.1.7
canonical ubuntu_linux16.04, 18.04, 19.04—
debian debian_linux10.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2019-15133 · Giflib · Dark Radar