CVE:CVE-2018-11490
CNNVD:CNNVD-201805-861
GIFLIB是一款用于读取和编辑gif图像的库。
GIFLIB 3.0版本至3.1.1版本中和sam2p 0.49.4版本中存在输入验证错误漏洞，该漏洞源于没有检查某个"Private->RunningCode - 2"数组索引。远程攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade giflib_project giflib to a higher version than 3.1.1,and avoid the version [3.0,3.1.1]; Upgrade sam2p_project sam2p to a higher version than 0.49.4,and avoid the version 0.49.4; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,and avoid the version 16.04,18.04,19.04