Test ID:	1.3.6.1.4.1.25623.1.1.10.2018.0280
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2018-0280)
Summary:	The remote host is missing an update for the 'gifsicle' package(s) announced via the MGASA-2018-0280 advisory.
Description:	Summary: The remote host is missing an update for the 'gifsicle' package(s) announced via the MGASA-2018-0280 advisory. Vulnerability Insight: Updated gifsicle package fixes security vulnerability: A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-service attack or unspecified other impact via a maliciously crafted file, because last_name is mishandled (CVE-2017-18120). Affected Software/OS: 'gifsicle' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-18120 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878739 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881120 https://github.com/kohler/gifsicle/commit/118a46090c50829dc543179019e6140e1235f909 https://github.com/kohler/gifsicle/issues/117
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.