Most recent entries from all

ALSA-2024:8117 — Moderate: java-1.8.0-openjdk security update

Affected: AlmaLinux:8: java-1.8.0-openjdk, AlmaLinux:8: java-1.8.0-openjdk-accessibility, AlmaLinux:8: java-1.8.0-openjdk-accessibility-fastdebug, AlmaLinux:8: java-1.8.0-openjdk-accessibility-slowdebug, AlmaLinux:8: java-1.8.0-openjdk-demo, AlmaLinux:8: java-1.8.0-openjdk-demo-fastdebug, AlmaLinux:8: java-1.8.0-openjdk-demo-slowdebug, AlmaLinux:8: java-1.8.0-openjdk-devel, AlmaLinux:8: java-1.8.0-openjdk-devel-fastdebug, AlmaLinux:8: java-1.8.0-openjdk-devel-slowdebug and 27 more

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161) * JDK: Array indexing integer overflow (8328544) (CVE-2024-21210) * JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208) * JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217) * JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2023-48161

Affected: Alpaquita:23: giflib, Alpaquita:stream: giflib

certfr-2024-avi-0958 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2024-avi-0958

EUVD-2026-9989

fkie_cve-2023-48161

Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c

GHSA-rgc3-xv9w-g763

Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c

gsd-2023-48161

msrc_CVE-2023-48161 — Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information…

msrc_CVE-2023-48161

OESA-2024-1757 — giflib security update

Affected: openEuler:20.03-LTS-SP4: giflib, openEuler:22.03-LTS-SP1: giflib, openEuler:22.03-LTS-SP3: giflib, openEuler:24.03-LTS: giflib

giflib is a library of gif images and provides utilities for processing images. Security Fix(es): An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read.(CVE-2020-23922) Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c(CVE-2023-48161)

openSUSE-SU-2024:13723-1 — giflib-devel-32bit-5.2.2-1.1 on GA media

giflib-devel-32bit-5.2.2-1.1 on GA media

RHSA-2024:8116 — Red Hat Security Advisory: java-1.8.0-openjdk security update

giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function JDK: HTTP client improper handling of maxHeaderSize (8328286) JDK: Array indexing integer overflow (8328544) JDK: Unbounded allocation leads to out-of-memory error (8331446) JDK: Integer conversion error leads to incorrect range check (8332644)

Withdrawn: UBUNTU-CVE-2023-48161

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: giflib, Ubuntu:Pro:18.04:LTS: giflib, Ubuntu:20.04:LTS: giflib, Ubuntu:22.04:LTS: giflib, Ubuntu:24.04:LTS: giflib, Ubuntu:25.10: giflib

Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c

WID-SEC-W-2025-0794 — Juniper Junos Space: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Zustand herbeizuführen und um andere, nicht näher spezifizierte Auswirkungen zu erzielen.