Published on August 18th, 2019 📆 | 4703 Views ⚑
0giflib Decoder dgif_lib.c DGifSlurp height denial of service
CVSS Meta Temp Score | Current Exploit Price (β) |
---|---|
3.4 | $0-$5k |
A vulnerability, which was classified as problematic, was found in giflib (the affected version unknown). This affects the function DGifSlurp
in the library dgif_lib.c of the component Decoder. The manipulation of the argument height
as part of a GIF File leads to a denial of service vulnerability (Divide-by-Zero). CWE is classifying the issue as CWE-369. This is going to have an impact on availability.
The weakness was disclosed 08/17/2019. This vulnerability is uniquely identified as CVE-2019-15133 since 08/17/2019. Technical details are known, but no exploit is available.
Upgrading eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.
Name
VulDB Meta Base Score: 3.5
VulDB Meta Temp Score: 3.4
VulDB Base Score: β3.5
VulDB Temp Score: β3.4
VulDB Vector: π
VulDB Reliability: π
VulDB Base Score: π
VulDB Temp Score: π
VulDB Reliability: π
Class: Denial of service / Divide-by-Zero (CWE-369)
Local: Yes
Remote: No
Availability: π
Status: Not defined
Price Prediction: π
Current Price Estimation: π
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Threat Intelligence
Threat: π
Adversaries: π
Geopolitics: π
Economy: π
Predictions: π
Remediation: πRecommended: Upgrade
Status: π
0-Day Time: π
02/16/2019 Countermeasure disclosed
08/17/2019 Advisory disclosed
08/17/2019 CVE assigned
08/18/2019 VulDB entry created
08/18/2019 VulDB last update
CVE: CVE-2019-15133 (π)Created: 08/18/2019 10:43 AM
Complete: π
Use the official API to access entries easily!
https://vuldb.com/?id.140277
Gloss