Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gd | Oct 5, 2018 | Aug 20, 2018 |
| Debian | — | Upgrade libgd2 | Feb 20, 2019 | Aug 20, 2018 |
| Gentoo Linux | — | Upgrade media-libs/gd. | Mar 29, 2019 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gd | Jun 27, 2019 | Aug 20, 2018 |
| Oracle Solaris | — | Upgrade system/display-manager/desktop-startup to version 0.38.0-11.4.6.0.1.1.0 on Solaris 11.4Upgrade x11/library/toolkit/fltk to version 1.3.4-11.4.6.0.1.1.0 on Solaris 11.4Upgrade image/library/libtiff to version 4.0.10-11.4.6.0.1.1.0 on Solaris 11.4Upgrade library/glib2 to version 2.52.0-11.4.6.0.1.1.0 on Solaris 11.4Upgrade x11/server/xvnc to version 1.7.1-11.4.6.0.1.1.0 on Solaris 11.4Upgrade system/display-manager/gdm to version 3.24.2-11.4.6.0.1.1.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.7.1-11.4.6.0.1.1.0 on Solaris 11.4Upgrade library/gd to version 2.2.5-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Aug 20, 2018 |
| Suse | — | Upgrade php7-tokenizerUpgrade php7-intlUpgrade gdUpgrade php7-bcmathUpgrade php7-ftpUpgrade php7-sysvsemUpgrade php7-opcacheUpgrade php7-snmpUpgrade libgd3Upgrade php7-curlUpgrade php7-pgsqlUpgrade php7-pharUpgrade php7-enchantUpgrade php7-wddxUpgrade php7-xmlwriterUpgrade php7-opensslUpgrade php7-calendarUpgrade php7-pcntlUpgrade php7-fpmUpgrade php7-pearUpgrade php7-ctypeUpgrade php7-fileinfoUpgrade php7-fastcgiUpgrade php7-iconvUpgrade gd-32bitUpgrade php7-gmpUpgrade php7-posixUpgrade php7-pdoUpgrade php7-sysvmsgUpgrade php7-jsonUpgrade php7-mbstringUpgrade php7-ldapUpgrade php7-sysvshmUpgrade php7-xmlreaderUpgrade php7-zlibUpgrade php7-sqliteUpgrade php7-bz2Upgrade php7-dbaUpgrade php7Upgrade php7-gdUpgrade php7-shmopUpgrade php7-zipUpgrade gd-develUpgrade php7-firebirdUpgrade libgd3-32bitUpgrade php7-sodiumUpgrade php7-pear-archive_tarUpgrade php7-xmlrpcUpgrade php7-xslUpgrade php7-soapUpgrade php7-tidyUpgrade php7-socketsUpgrade php7-domUpgrade php7-mysqlUpgrade php7-odbcUpgrade php7-exifUpgrade php7-readlineUpgrade php7-embedUpgrade php72-develUpgrade php7-gettextUpgrade php7-develUpgrade apache2-mod_php7 | Sep 25, 2018 | Aug 20, 2018 |
| Ubuntu | — | Upgrade libgd-toolsUpgrade libgd3 | Sep 11, 2018 | Aug 20, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub