gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-gdalma-upgrade-gd-devel | May 4, 2022 | Feb 11, 2020 | |
| Alpine Linux | alpine-linux-upgrade-gd | Mar 26, 2024 | Feb 11, 2020 | |
| Centos_linux | — | centos-upgrade-gdcentos-upgrade-gd-debuginfocentos-upgrade-gd-debugsourcecentos-upgrade-gd-develcentos-upgrade-gd-progs-debuginfo | Nov 5, 2020 | Feb 11, 2020 |
| Debian | debian-upgrade-libgd2 | Feb 19, 2020 | Feb 11, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-gd | Jul 31, 2020 | Feb 11, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-gd-2-2-5-11-4-21-0-1-69-0 | Jan 19, 2021 | Feb 11, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-gdoracle-linux-upgrade-gd-devel | Nov 12, 2020 | Dec 20, 2019 |
| Redhat_linux | redhat-upgrade-gdredhat-upgrade-gd-debuginforedhat-upgrade-gd-debugsourceredhat-upgrade-gd-develredhat-upgrade-gd-progs-debuginfo | Nov 5, 2020 | Feb 11, 2020 | |
| Rocky_linux | rocky-upgrade-gdrocky-upgrade-gd-debuginforocky-upgrade-gd-debugsourcerocky-upgrade-gd-devel | Mar 12, 2024 | Feb 11, 2020 | |
| Suse | — | suse-upgrade-gdsuse-upgrade-gd-32bitsuse-upgrade-gd-develsuse-upgrade-libgd3suse-upgrade-libgd3-32bit | Mar 10, 2020 | Feb 11, 2020 |
| Ubuntu | ubuntu-pro-upgrade-libgd-toolsubuntu-pro-upgrade-libgd3ubuntu-upgrade-libgd-toolsubuntu-upgrade-libgd3 | Apr 3, 2020 | Feb 11, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub