CVE:CVE-2019-15133
CNNVD:CNNVD-201908-1197
GIFLIB是一款用于读取和编辑gif图像的库。
GIFLIB 2019-02-16之前版本中的dgif_lib.c文件的‘DGifSlurp’函数存在数字错误漏洞。该漏洞源于网络系统或产品未正确计算或转换所产生的数字。攻击者可利用该漏洞导致整数溢出或符号错误等。
solution:Upgrade giflib_project giflib to a higher version than 5.1.7,and avoid the version (,5.1.7); Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,and avoid the version 16.04,18.04,19.04; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0