Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gd | Oct 5, 2018 | Aug 20, 2018 |
| Debian | — | Upgrade libgd2 | Feb 20, 2019 | Aug 20, 2018 |
| Gentoo Linux | — | Upgrade media-libs/gd. | Mar 29, 2019 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gd | Jun 27, 2019 | Aug 20, 2018 |
| Oracle Solaris | — | Upgrade image/library/libtiff to version 4.0.10-11.4.6.0.1.1.0 on Solaris 11.4Upgrade system/display-manager/desktop-startup to version 0.38.0-11.4.6.0.1.1.0 on Solaris 11.4Upgrade x11/library/toolkit/fltk to version 1.3.4-11.4.6.0.1.1.0 on Solaris 11.4Upgrade system/display-manager/gdm to version 3.24.2-11.4.6.0.1.1.0 on Solaris 11.4Upgrade library/glib2 to version 2.52.0-11.4.6.0.1.1.0 on Solaris 11.4Upgrade x11/server/xvnc to version 1.7.1-11.4.6.0.1.1.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.7.1-11.4.6.0.1.1.0 on Solaris 11.4Upgrade library/gd to version 2.2.5-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Aug 20, 2018 |
| Suse | — | Upgrade php7-sqliteUpgrade php7-embedUpgrade php7-bz2Upgrade php7-zipUpgrade php7-domUpgrade php7-shmopUpgrade php7-mbstringUpgrade gd-develUpgrade php7-gdUpgrade php7-gettextUpgrade php7-sysvmsgUpgrade php7-zlibUpgrade php7Upgrade php7-develUpgrade php7-posixUpgrade php7-pear-archive_tarUpgrade php7-ldapUpgrade php7-sodiumUpgrade php7-sysvshmUpgrade apache2-mod_php7Upgrade libgd3-32bitUpgrade php7-xmlrpcUpgrade php7-soapUpgrade php72-develUpgrade php7-gmpUpgrade php7-xmlreaderUpgrade php7-dbaUpgrade php7-mysqlUpgrade php7-firebirdUpgrade php7-tidyUpgrade php7-socketsUpgrade php7-readlineUpgrade php7-jsonUpgrade php7-pdoUpgrade php7-exifUpgrade php7-odbcUpgrade php7-xslUpgrade php7-pharUpgrade php7-curlUpgrade php7-snmpUpgrade php7-opensslUpgrade php7-bcmathUpgrade php7-pearUpgrade php7-opcacheUpgrade php7-ftpUpgrade php7-pgsqlUpgrade php7-iconvUpgrade php7-xmlwriterUpgrade php7-enchantUpgrade php7-intlUpgrade gdUpgrade php7-wddxUpgrade libgd3Upgrade php7-calendarUpgrade php7-fastcgiUpgrade php7-fpmUpgrade php7-sysvsemUpgrade php7-tokenizerUpgrade php7-fileinfoUpgrade php7-ctypeUpgrade php7-pcntlUpgrade gd-32bit | Sep 25, 2018 | Aug 20, 2018 |
| Ubuntu | — | Upgrade libgd3Upgrade libgd-tools | Sep 11, 2018 | Aug 20, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub