Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gd | Oct 5, 2018 | Aug 20, 2018 |
| Debian | — | Upgrade libgd2 | Feb 20, 2019 | Aug 20, 2018 |
| Gentoo Linux | — | Upgrade media-libs/gd. | Mar 29, 2019 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gd | Jun 27, 2019 | Aug 20, 2018 |
| Oracle Solaris | — | Upgrade image/library/libtiff to version 4.0.10-11.4.6.0.1.1.0 on Solaris 11.4Upgrade system/display-manager/desktop-startup to version 0.38.0-11.4.6.0.1.1.0 on Solaris 11.4Upgrade x11/library/toolkit/fltk to version 1.3.4-11.4.6.0.1.1.0 on Solaris 11.4Upgrade library/glib2 to version 2.52.0-11.4.6.0.1.1.0 on Solaris 11.4Upgrade system/display-manager/gdm to version 3.24.2-11.4.6.0.1.1.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.7.1-11.4.6.0.1.1.0 on Solaris 11.4Upgrade x11/server/xvnc to version 1.7.1-11.4.6.0.1.1.0 on Solaris 11.4Upgrade library/gd to version 2.2.5-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Aug 20, 2018 |
| Suse | — | Upgrade php7-wddxUpgrade php7-ctypeUpgrade php7-intlUpgrade php7-bcmathUpgrade php7-tokenizerUpgrade php7-sysvsemUpgrade gdUpgrade php7-calendarUpgrade php7-opensslUpgrade php7-fileinfoUpgrade php7-snmpUpgrade php7-pcntlUpgrade gd-32bitUpgrade php7-fpmUpgrade php7-pearUpgrade libgd3Upgrade php7-enchantUpgrade php7-iconvUpgrade php7-xmlwriterUpgrade php7-pharUpgrade php7-opcacheUpgrade php7-ftpUpgrade php7-curlUpgrade php7-fastcgiUpgrade php7-pgsqlUpgrade php72-develUpgrade php7-xslUpgrade apache2-mod_php7Upgrade php7-ldapUpgrade php7-xmlreaderUpgrade php7-mysqlUpgrade php7-firebirdUpgrade php7-posixUpgrade php7-pear-archive_tarUpgrade gd-develUpgrade php7-sodiumUpgrade php7-gmpUpgrade php7-odbcUpgrade php7-exifUpgrade php7-zipUpgrade php7-gdUpgrade php7Upgrade php7-sqliteUpgrade php7-bz2Upgrade php7-mbstringUpgrade php7-tidyUpgrade php7-embedUpgrade php7-readlineUpgrade php7-jsonUpgrade php7-shmopUpgrade php7-socketsUpgrade php7-domUpgrade php7-develUpgrade php7-gettextUpgrade php7-pdoUpgrade php7-sysvmsgUpgrade php7-zlibUpgrade php7-xmlrpcUpgrade php7-soapUpgrade php7-dbaUpgrade php7-sysvshmUpgrade libgd3-32bit | Sep 25, 2018 | Aug 20, 2018 |
| Ubuntu | — | Upgrade libgd-toolsUpgrade libgd3 | Sep 11, 2018 | Aug 20, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub