Your submission was sent successfully! Close

CVE-2021-40633

Published: 14 June 2022

A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file.

Notes

AuthorNote
mdeslaur 
no upstream fix available as of 2022-06-22
Priority

Low

CVSS 3 base score: 8.8

Status

Package Release Status
giflib
Launchpad, Ubuntu, Debian 		bionic Deferred
(2022-06-22)
focal Deferred
(2022-06-22)
impish Ignored
(reached end-of-life)
jammy Deferred
(2022-06-22)
upstream Needs triage

xenial Deferred
(2022-06-22)

References

Bugs

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

Further reading