The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gd | Sep 20, 2017 | Mar 15, 2017 |
| Amazon_linux | — | Upgrade php70Upgrade php56 | Mar 30, 2017 | Jan 31, 2017 |
| Centos_linux | — | Upgrade php-debuginfoUpgrade phpUpgrade php-xmlUpgrade php-mysqlndUpgrade php-enchantUpgrade php-snmpUpgrade php-recodeUpgrade php-intlUpgrade php-embeddedUpgrade php-cliUpgrade php-processUpgrade php-ldapUpgrade php-pgsqlUpgrade php-pdoUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-odbcUpgrade php-pspellUpgrade php-develUpgrade php-soapUpgrade php-commonUpgrade php-bcmathUpgrade php-gdUpgrade php-dbaUpgrade php-mbstring | Nov 16, 2017 | Jan 31, 2017 |
| Debian | — | Upgrade libgd2 | Feb 1, 2017 | Jan 31, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade php-mysqlUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-gdUpgrade php-processUpgrade php-soapUpgrade php-pdoUpgrade php-xmlUpgrade php-odbcUpgrade phpUpgrade php-recodeUpgrade php-ldapUpgrade php-cliUpgrade php-common | Dec 4, 2017 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gd | Dec 4, 2017 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gd | Apr 16, 2020 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gd | Nov 19, 2019 | Mar 15, 2017 |
| Oracle Solaris | — | Upgrade library/gd to version 2.0.35-0.175.3.17.0.4.0 on Solaris 11.3 | May 29, 2017 | Mar 15, 2017 |
| Oracle_linux | — | Upgrade php-mbstringUpgrade php-enchantUpgrade php-mysqlUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-pdoUpgrade php-bcmathUpgrade php-develUpgrade php-xmlUpgrade php-ldapUpgrade php-cliUpgrade php-intlUpgrade php-recodeUpgrade php-pgsqlUpgrade php-odbcUpgrade php-processUpgrade php-commonUpgrade php-snmpUpgrade php-pspellUpgrade php-soapUpgrade php-gdUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-dbaUpgrade php | Nov 15, 2017 | Aug 16, 2016 |
| Redhat_linux | — | Upgrade php-mysqlUpgrade php-debuginfoUpgrade php-xmlUpgrade php-pgsqlUpgrade php-processUpgrade php-mbstringUpgrade php-odbcUpgrade php-cliUpgrade php-xmlrpcUpgrade php-snmpUpgrade php-commonUpgrade php-pspellUpgrade php-mysqlndUpgrade php-fpmUpgrade php-develUpgrade php-bcmathUpgrade php-ldapUpgrade php-enchantUpgrade php-recodeUpgrade php-soapNo solution existsUpgrade php-dbaUpgrade php-pdoUpgrade phpUpgrade php-gdUpgrade php-intlUpgrade php-embedded | Nov 15, 2017 | Jan 31, 2017 |
| Suse | — | Upgrade php7-domUpgrade php5-fastcgiUpgrade php53-soapUpgrade php53-gettextUpgrade php7-zlibUpgrade php53-sqliteUpgrade php5-sysvsemUpgrade php7-socketsUpgrade php7-pdoUpgrade php7-bz2Upgrade php5-pearUpgrade php53-calendarUpgrade php53-socketsUpgrade php7-jsonUpgrade php5-ctypeUpgrade php7-fpmUpgrade apache2-mod_php5Upgrade php5-domUpgrade php7-mbstringUpgrade php7-iconvUpgrade php5-mcryptUpgrade php53-readlineUpgrade php7-ldapUpgrade php7-posixUpgrade php53-odbcUpgrade php53-wddxUpgrade php7-xmlwriterUpgrade php5-opensslUpgrade php5-iconvUpgrade php5-sysvmsgUpgrade php53-pgsqlUpgrade php7-tokenizerUpgrade php5-wddxUpgrade php5-xslUpgrade php5-bcmathUpgrade php53-curlUpgrade php7-enchantUpgrade php7-pgsqlUpgrade php53Upgrade php7-exifUpgrade php5-ftpUpgrade php53-xmlreaderUpgrade php53-tidyUpgrade php53-sysvmsgUpgrade php5-socketsUpgrade php53-shmopUpgrade php5-jsonUpgrade php7-xmlreaderUpgrade php53-iconvUpgrade php7-soapUpgrade php5-gmpUpgrade php5-imapUpgrade php7-curlUpgrade php5Upgrade php53-imapUpgrade php7-bcmathUpgrade php53-gdUpgrade php53-develUpgrade php53-zipUpgrade php5-mysqlUpgrade php5-xmlrpcUpgrade php7-gdUpgrade php7-snmpUpgrade php7-pharUpgrade php7-sqliteUpgrade php5-gettextUpgrade php7Upgrade libgd3-32bitUpgrade php53-mcryptUpgrade php53-ldapUpgrade php7-wddxUpgrade php53-ftpUpgrade php53-bz2Upgrade php7-pcntlUpgrade php53-pdoUpgrade php5-xmlreaderUpgrade php7-opensslUpgrade php53-mbstringUpgrade php5-zipUpgrade php5-pdoUpgrade php7-gettextUpgrade php7-pear-archive_tarUpgrade php7-sysvmsgUpgrade php5-pharUpgrade php53-mysqlUpgrade php53-sysvsemUpgrade php7-gmpUpgrade php5-xmlwriterUpgrade apache2-mod_php7Upgrade php53-posixUpgrade php7-ftpUpgrade php53-suhosinUpgrade gd-32bitUpgrade php5-tokenizerUpgrade php7-mcryptUpgrade php7-shmopUpgrade php53-xslUpgrade php7-pearUpgrade php5-exifUpgrade php5-bz2Upgrade php53-tokenizerUpgrade gdUpgrade libgd3Upgrade php5-sysvshmUpgrade php5-opcacheUpgrade php53-fastcgiUpgrade php7-mysqlUpgrade php53-xmlwriterUpgrade php53-snmpUpgrade php5-develUpgrade php5-intlUpgrade php53-jsonUpgrade php53-fileinfoUpgrade php53-intlUpgrade php5-pspellUpgrade php7-develUpgrade php5-shmopUpgrade php53-domUpgrade php5-odbcUpgrade php7-fastcgiUpgrade php5-dbaUpgrade php53-gmpUpgrade php7-fileinfoUpgrade php7-xmlrpcUpgrade php5-sqliteUpgrade php7-pspellUpgrade php53-ctypeUpgrade gd-develUpgrade php5-suhosinUpgrade php5-curlUpgrade php7-odbcUpgrade php7-zipUpgrade php53-pearUpgrade php5-snmpUpgrade php7-ctypeUpgrade php53-pcntlUpgrade php5-mbstringUpgrade php5-posixUpgrade php5-pcntlUpgrade php5-ldapUpgrade php5-gdUpgrade php5-calendarUpgrade php53-zlibUpgrade php7-calendarUpgrade php7-sysvsemUpgrade php7-opcacheUpgrade php7-dbaUpgrade php5-pgsqlUpgrade php53-pspellUpgrade php7-xslUpgrade php5-fpmUpgrade php7-intlUpgrade php7-sysvshmUpgrade php53-dbaUpgrade php5-fileinfoUpgrade php53-bcmathUpgrade apache2-mod_php53Upgrade php5-soapUpgrade php53-sysvshmUpgrade php53-xmlrpcUpgrade php5-zlibUpgrade php53-exifUpgrade php5-enchantUpgrade php53-opensslUpgrade php7-imap | Feb 15, 2017 | Jan 31, 2017 |
| Ubuntu | — | Upgrade libgd2-xpmUpgrade libgd2-noxpmUpgrade libgd3 | Mar 1, 2017 | Jan 31, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub