The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gd | Sep 20, 2017 | Mar 15, 2017 |
| Amazon_linux | — | Upgrade php70Upgrade php56 | Mar 30, 2017 | Jan 31, 2017 |
| Centos_linux | — | Upgrade php-snmpUpgrade php-mysqlndUpgrade php-ldapUpgrade php-processUpgrade php-enchantUpgrade php-debuginfoUpgrade php-recodeUpgrade php-embeddedUpgrade php-xmlUpgrade php-cliUpgrade phpUpgrade php-intlUpgrade php-pgsqlUpgrade php-soapUpgrade php-pdoUpgrade php-pspellUpgrade php-dbaUpgrade php-odbcUpgrade php-mbstringUpgrade php-bcmathUpgrade php-gdUpgrade php-xmlrpcUpgrade php-commonUpgrade php-develUpgrade php-fpmUpgrade php-mysql | Nov 16, 2017 | Jan 31, 2017 |
| Debian | — | Upgrade libgd2 | Feb 1, 2017 | Jan 31, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade php-odbcUpgrade php-cliUpgrade php-xmlUpgrade php-recodeUpgrade php-pdoUpgrade phpUpgrade php-commonUpgrade php-ldapUpgrade php-processUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-gdUpgrade php-soapUpgrade php-xmlrpc | Dec 4, 2017 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gd | Dec 4, 2017 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gd | Apr 16, 2020 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gd | Nov 19, 2019 | Mar 15, 2017 |
| Oracle Solaris | — | Upgrade library/gd to version 2.0.35-0.175.3.17.0.4.0 on Solaris 11.3 | May 29, 2017 | Mar 15, 2017 |
| Oracle_linux | — | Upgrade php-ldapUpgrade php-develUpgrade php-xmlUpgrade php-fpmUpgrade php-pdoUpgrade php-mbstringUpgrade php-mysqlUpgrade php-bcmathUpgrade php-enchantUpgrade php-xmlrpcUpgrade php-gdUpgrade php-intlUpgrade php-pgsqlUpgrade phpUpgrade php-odbcUpgrade php-dbaUpgrade php-recodeUpgrade php-commonUpgrade php-snmpUpgrade php-processUpgrade php-pspellUpgrade php-soapUpgrade php-mysqlndUpgrade php-embeddedUpgrade php-cli | Nov 15, 2017 | Aug 16, 2016 |
| Redhat_linux | — | Upgrade php-snmpUpgrade php-xmlrpcUpgrade php-xmlUpgrade php-cliUpgrade php-debuginfoUpgrade php-commonUpgrade php-mysqlUpgrade php-pgsqlUpgrade php-odbcUpgrade php-mbstringUpgrade php-processUpgrade php-gdUpgrade php-soapUpgrade php-dbaUpgrade php-pspellUpgrade phpUpgrade php-pdoUpgrade php-intlUpgrade php-enchantUpgrade php-fpmNo solution existsUpgrade php-recodeUpgrade php-embeddedUpgrade php-bcmathUpgrade php-ldapUpgrade php-develUpgrade php-mysqlnd | Nov 15, 2017 | Jan 31, 2017 |
| Suse | — | Upgrade php5-ftpUpgrade php5-socketsUpgrade php53-calendarUpgrade php53-shmopUpgrade php7Upgrade php7-sysvmsgUpgrade php7-gmpUpgrade php53-ldapUpgrade php53-posixUpgrade php53-suhosinUpgrade php53-curlUpgrade php5-zipUpgrade php7-jsonUpgrade apache2-mod_php5Upgrade php53-gettextUpgrade php5-fastcgiUpgrade php7-soapUpgrade libgd3-32bitUpgrade php5-pearUpgrade php7-opensslUpgrade php7-tokenizerUpgrade php5-opensslUpgrade php5-domUpgrade php7-fpmUpgrade php53-gdUpgrade php7-exifUpgrade php53-iconvUpgrade php5Upgrade php5-pdoUpgrade php53-ftpUpgrade php53-sqliteUpgrade php5-xmlrpcUpgrade php53-socketsUpgrade php7-sqliteUpgrade php7-mbstringUpgrade php5-mysqlUpgrade php5-jsonUpgrade php7-posixUpgrade php7-ftpUpgrade php7-wddxUpgrade php7-snmpUpgrade php5-gettextUpgrade php5-xmlreaderUpgrade php5-xslUpgrade php7-pgsqlUpgrade php7-zlibUpgrade php5-imapUpgrade php5-iconvUpgrade php7-gdUpgrade php53-sysvsemUpgrade php53-pdoUpgrade php5-bcmathUpgrade php5-xmlwriterUpgrade php53-bz2Upgrade php5-gmpUpgrade php7-bcmathUpgrade php5-ctypeUpgrade php53-readlineUpgrade php53-imapUpgrade php7-pcntlUpgrade php7-pear-archive_tarUpgrade php7-pharUpgrade php7-gettextUpgrade php5-wddxUpgrade php7-curlUpgrade php53-pgsqlUpgrade php7-xmlwriterUpgrade php5-sysvmsgUpgrade php53-tidyUpgrade php7-pdoUpgrade php53-mcryptUpgrade php5-sysvsemUpgrade php53-soapUpgrade php7-socketsUpgrade php53-wddxUpgrade php7-ldapUpgrade php7-iconvUpgrade php53-odbcUpgrade php53-xmlreaderUpgrade php7-domUpgrade php53-sysvmsgUpgrade php7-enchantUpgrade php53-mysqlUpgrade php53-mbstringUpgrade apache2-mod_php7Upgrade php53-develUpgrade php7-xmlreaderUpgrade php5-mcryptUpgrade php53Upgrade php53-zipUpgrade php5-pharUpgrade php7-bz2Upgrade php7-imapUpgrade php53-jsonUpgrade gd-develUpgrade php7-xmlrpcUpgrade php5-bz2Upgrade php5-ldapUpgrade php53-gmpUpgrade php53-pspellUpgrade php5-pcntlUpgrade php5-soapUpgrade php5-calendarUpgrade php53-bcmathUpgrade php5-sqliteUpgrade php5-pgsqlUpgrade php5-gdUpgrade php7-opcacheUpgrade php7-shmopUpgrade php7-pearUpgrade php53-xslUpgrade php7-calendarUpgrade php5-suhosinUpgrade php53-ctypeUpgrade php7-dbaUpgrade php7-pspellUpgrade php7-fileinfoUpgrade gd-32bitUpgrade php7-sysvsemUpgrade php7-develUpgrade php7-odbcUpgrade php53-xmlwriterUpgrade php5-mbstringUpgrade php5-exifUpgrade php5-snmpUpgrade php53-pearUpgrade php53-pcntlUpgrade php7-ctypeUpgrade php7-zipUpgrade php5-zlibUpgrade php5-develUpgrade php7-fastcgiUpgrade php53-fileinfoUpgrade php53-fastcgiUpgrade php5-odbcUpgrade php5-tokenizerUpgrade php5-curlUpgrade php5-opcacheUpgrade php53-exifUpgrade gdUpgrade php5-shmopUpgrade php5-fileinfoUpgrade php7-intlUpgrade php7-sysvshmUpgrade php7-mcryptUpgrade php53-intlUpgrade php53-xmlrpcUpgrade php53-dbaUpgrade php7-xslUpgrade php5-fpmUpgrade php5-pspellUpgrade php5-intlUpgrade php5-dbaUpgrade php53-opensslUpgrade libgd3Upgrade php7-mysqlUpgrade php53-tokenizerUpgrade php53-snmpUpgrade apache2-mod_php53Upgrade php53-domUpgrade php5-enchantUpgrade php53-sysvshmUpgrade php5-sysvshmUpgrade php5-posixUpgrade php53-zlib | Feb 15, 2017 | Jan 31, 2017 |
| Ubuntu | — | Upgrade libgd3Upgrade libgd2-xpmUpgrade libgd2-noxpm | Mar 1, 2017 | Jan 31, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub