libgsf (SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 package libgsf, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2024-36474 — CVSS 8.4 (high): An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library…
• CVE-2024-42415 — CVSS 8.4 (high): An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured…
• CVE-2016-9888 — CVSS 5.5 (medium): An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited…