The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 28, 2007 |
| Debian | — | Upgrade racketUpgrade libgd2 | Jul 30, 2024 | Jun 28, 2007 |
| Freebsd | — | Upgrade gdUpgrade libwmf | Dec 10, 2025 | Jun 29, 2007 |
| Gentoo Linux | — | Upgrade media-libs/gd. | Oct 30, 2017 | Jun 28, 2007 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 21, 2007 |
| Suse | — | Upgrade php5-sqliteUpgrade php4-readlineUpgrade php4-recodeUpgrade php5-shmopUpgrade php5-socketsUpgrade php5-mhashUpgrade gd-develUpgrade php5-pspellUpgrade php4-bz2Upgrade php5-imapUpgrade php4-ctypeUpgrade php4-exifUpgrade php4-iconvUpgrade php5-tidyUpgrade php5-pearUpgrade php4-develUpgrade php5-mbstringUpgrade mod_php4-coreUpgrade php4-gettextUpgrade php4-mhashUpgrade php5-gettextUpgrade php5-xmlrpcUpgrade php5-domUpgrade php4-snmpUpgrade php5-gdUpgrade php4-shmopUpgrade php4-pearUpgrade php5-sysvmsgUpgrade php5-ncursesUpgrade php4-unixODBCUpgrade php5-bcmathUpgrade php5-ldapUpgrade php5-snmpUpgrade php4-dbaUpgrade php5-exifUpgrade php5-sysvsemUpgrade php4-ypUpgrade php5-bz2Upgrade php5-fastcgiUpgrade php4-qtdomUpgrade php5-opensslUpgrade php5-suhosinUpgrade suse-releaseUpgrade php4-mbstringUpgrade php5-xmlreaderUpgrade php5-ctypeUpgrade php5-xslUpgrade php5-curlUpgrade php5-iconvUpgrade php4-ldapUpgrade php4-swfUpgrade php4-ftpUpgrade php4-mcalUpgrade php4-curlUpgrade php5-ftpUpgrade php4-calendarUpgrade php5-gmpUpgrade php5-calendarUpgrade php5-hashUpgrade mod_php4-apache2Upgrade apache2-mod_php5Upgrade php4-mcryptUpgrade php4-domxmlUpgrade php4-xsltUpgrade php4-fileproUpgrade php4-gmpUpgrade php4-sessionUpgrade php5-mcryptUpgrade php4-socketsUpgrade php5-tokenizerUpgrade php5-wddxUpgrade php4-wddxUpgrade php4-zlibUpgrade php5-mysqlUpgrade php5-jsonUpgrade php5-zlibUpgrade php5-pcntlUpgrade gdUpgrade php4-sysvshmUpgrade php5-odbcUpgrade php5-develUpgrade php5-xmlwriterUpgrade php4-imapUpgrade php5-posixUpgrade php4-mysqlUpgrade php4-sysvsemUpgrade php5-pgsqlUpgrade apache2-mod_php4Upgrade php4-bcmathUpgrade php4-mime_magicUpgrade php5-soapUpgrade php5-dbaUpgrade php5-dbaseUpgrade php5-pdoUpgrade php4-pgsqlUpgrade mod_php4-servletUpgrade php4-dbaseUpgrade php4-gdUpgrade php4-fastcgiUpgrade php5-sysvshmUpgrade php5-zipUpgrade apache-mod_php4 | Feb 17, 2015 | Jun 28, 2007 |
| Ubuntu | — | Upgrade libgd2-xpmUpgrade libgd2-noxpm | Nov 8, 2024 | Jun 28, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub