CVE Feed

    Dashboard / CVE / CVE-2020-23922

    CVE-2020-23922

    An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read.

    Published:Apr 21, 2021
    Last Modified:Nov 21, 2024
    EPS:Apr 21, 2021
    EPSS Score:0.02882
    CVSS Score:7.1

    Affected Products

    Vendor
    Apache
    Product
    Bookkeeper
    Vendor
    Giflib Project
    Product
    Giflib

    Exploits

    https://sourceforge.net/p/giflib/bugs/151/https://sourceforge.net/p/giflib/bugs/151/

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2022-32531 (CVSS 5.9) — The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkee…
    CVE-2020-36230 (CVSS 7.5) — A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsi…
    CVE-2019-19924 (CVSS 5.3) — SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is ca…
    CVE-2019-17571 (CVSS 9.8) — Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which ca…
    CVE-2019-19906 (CVSS 7.5) — cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-serv…
    CVE-2017-6891 (CVSS 8.8) — Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be ex…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High