CVE-2023-44821
Medium
Description
Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect Gif_Realloc calls, might allow a denial of service (memory consumption). NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arrives for a long-running process, does not ship with functionality to link it into another application as a library, and does not have realistic use cases in which an adversary controls the entire command line.
SeverityMedium
CVSS5.5
Exploit probability—
ProductLcdf Gifsicle
PublishedOct 9, 2023
First seenOct 9, 2023
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lcdf gifsicle | v ≤ 1.94 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.