The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700 bytes from the top of the stack, potentially disclosing sensitive information.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php7Upgrade gd | Jan 2, 2018 | Aug 2, 2017 |
| Amazon_linux | — | Upgrade php70 | Aug 4, 2017 | Aug 2, 2017 |
| Centos_linux | — | Upgrade php-embeddedUpgrade php-bcmathUpgrade php-cliUpgrade php-processUpgrade php-xmlUpgrade php-fpmUpgrade php-gdUpgrade php-xmlrpcUpgrade php-enchantUpgrade php-snmpUpgrade phpUpgrade php-mbstringUpgrade php-pspellUpgrade php-recodeUpgrade php-develUpgrade php-mysqlndUpgrade php-debuginfoUpgrade php-pdoUpgrade php-dbaUpgrade php-mysqlUpgrade php-odbcUpgrade php-commonUpgrade php-soapUpgrade php-pgsqlUpgrade php-intlUpgrade php-ldap | Mar 13, 2018 | Aug 2, 2017 |
| Debian | — | Upgrade libgd2 | Aug 13, 2017 | Aug 2, 2017 |
| Freebsd | — | Upgrade php71-gdUpgrade libgdUpgrade php70-gd | Sep 26, 2017 | Sep 26, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade php-gdUpgrade php-ldapUpgrade php-cliUpgrade php-recodeUpgrade php-xmlUpgrade php-processUpgrade phpUpgrade php-mysqlUpgrade php-pgsqlUpgrade php-commonUpgrade php-odbcUpgrade php-soapUpgrade php-xmlrpcUpgrade php-pdo | May 3, 2018 | Aug 2, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-odbcUpgrade php-ldapUpgrade php-commonUpgrade php-pdoUpgrade phpUpgrade php-pgsqlUpgrade php-soapUpgrade php-xmlrpcUpgrade php-recodeUpgrade php-xmlUpgrade php-mysqlUpgrade php-gdUpgrade php-cliUpgrade php-process | May 2, 2018 | Aug 2, 2017 |
| Oracle Solaris | — | Upgrade web/php-71 to version 7.1.15-0.175.3.31.0.2.0 on Solaris 11.3Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade web/php-56 to version 5.6.34-0.175.3.31.0.2.0 on Solaris 11.3 | Apr 18, 2018 | Aug 2, 2017 |
| Oracle_linux | — | Upgrade php-pdoUpgrade php-ldapUpgrade php-soapUpgrade php-develUpgrade php-pgsqlUpgrade php-odbcUpgrade php-mbstringUpgrade php-dbaUpgrade php-intlUpgrade php-pspellUpgrade php-commonUpgrade php-mysqlUpgrade php-bcmathUpgrade php-gdUpgrade php-cliUpgrade php-processUpgrade php-embeddedUpgrade php-fpmUpgrade php-xmlUpgrade php-recodeUpgrade php-xmlrpcUpgrade php-mysqlndUpgrade phpUpgrade php-snmpUpgrade php-enchant | Mar 9, 2018 | Jul 10, 2017 |
| Php | — | Upgrade to PHP version 5.6.31Upgrade to PHP version 7.0.21Upgrade to PHP version 7.1.7 | Aug 24, 2017 | Aug 2, 2017 |
| Redhat_linux | — | Upgrade php-pdoUpgrade php-xmlrpcUpgrade php-snmpUpgrade php-recodeUpgrade php-gdUpgrade php-mysqlndUpgrade php-enchantUpgrade php-xmlUpgrade php-processUpgrade php-pspellUpgrade php-cliUpgrade php-bcmathUpgrade php-ldapUpgrade php-embeddedUpgrade phpNo solution existsUpgrade php-intlUpgrade php-odbcUpgrade php-pgsqlUpgrade php-soapUpgrade php-dbaUpgrade php-mysqlUpgrade php-debuginfoUpgrade php-mbstringUpgrade php-fpmUpgrade php-develUpgrade php-common | Mar 7, 2018 | Aug 2, 2017 |
| Suse | — | Upgrade php7-ftpUpgrade php7-sysvsemUpgrade php5-pspellUpgrade php5-domUpgrade php7-xmlwriterUpgrade php7-sysvmsgUpgrade php53-domUpgrade php7-ctypeUpgrade php7-iconvUpgrade php5-sysvmsgUpgrade php5-zipUpgrade php7-develUpgrade php5-ldapUpgrade php7-calendarUpgrade php5-tokenizerUpgrade gd-32bitUpgrade php7-wddxUpgrade php7-pgsqlUpgrade php7-shmopUpgrade php5-zlibUpgrade php5-sysvshmUpgrade php5-iconvUpgrade php53-soapUpgrade php7-fileinfoUpgrade php5-xmlrpcUpgrade php5-ctypeUpgrade php5-pearUpgrade php7-fastcgiUpgrade php5-imapUpgrade php53-xmlrpcUpgrade php7-mbstringUpgrade php7-odbcUpgrade php5-gettextUpgrade php53-sysvsemUpgrade php7-jsonUpgrade php5-mbstringUpgrade php53-pspellUpgrade php5-exifUpgrade php5-pgsqlUpgrade php53-tokenizerUpgrade apache2-mod_php7Upgrade php53-sysvmsgUpgrade apache2-mod_php53Upgrade php53-jsonUpgrade php53-xslUpgrade php5-fileinfoUpgrade php5-opensslUpgrade php7-imapUpgrade php5-soapUpgrade php5-shmopUpgrade php7-sysvshmUpgrade php53-imapUpgrade php7-opensslUpgrade php7Upgrade php53-ctypeUpgrade php53-mbstringUpgrade php5-bz2Upgrade php7-pearUpgrade gd-develUpgrade php7-xmlrpcUpgrade php7-soapUpgrade php5-snmpUpgrade php53-tidyUpgrade php5-mysqlUpgrade php5-sqliteUpgrade php7-fpmUpgrade php5-odbcUpgrade php53-odbcUpgrade php53-socketsUpgrade php5-curlUpgrade php53-suhosinUpgrade php5-pharUpgrade php7-opcacheUpgrade php53-bz2Upgrade php5-ftpUpgrade php53-snmpUpgrade php5-sysvsemUpgrade php53-sqliteUpgrade php5-pdoUpgrade php53-fastcgiUpgrade php7-gettextUpgrade php53-shmopUpgrade php7-domUpgrade php5-xmlwriterUpgrade php7-pspellUpgrade php53-gdUpgrade php53-ldapUpgrade php5Upgrade php53-xmlreaderUpgrade php7-pdoUpgrade php5-pcntlUpgrade php7-curlUpgrade php53-pdoUpgrade php53-pgsqlUpgrade php7-xmlreaderUpgrade php7-pcntlUpgrade php5-fastcgiUpgrade php7-posixUpgrade php53-bcmathUpgrade php53-sysvshmUpgrade php53-iconvUpgrade php53-mcryptUpgrade php7-gdUpgrade php5-opcacheUpgrade php53-gmpUpgrade php53-dbaUpgrade php5-xmlreaderUpgrade php7-exifUpgrade libgd3Upgrade php53-zipUpgrade php7-bz2Upgrade php53-zlibUpgrade php53-calendarUpgrade gdUpgrade php5-gmpUpgrade php53-pearUpgrade php7-gmpUpgrade php53-curlUpgrade php5-jsonUpgrade php53-readlineUpgrade php7-intlUpgrade php5-develUpgrade php5-calendarUpgrade php5-bcmathUpgrade php5-mcryptUpgrade php7-xslUpgrade php7-zipUpgrade php53-mysqlUpgrade php53-develUpgrade php5-xslUpgrade php5-socketsUpgrade php53Upgrade php7-dbaUpgrade php7-mysqlUpgrade php53-pcntlUpgrade php7-tokenizerUpgrade php7-enchantUpgrade php5-posixUpgrade php5-gdUpgrade php7-pharUpgrade php7-pear-archive_tarUpgrade php7-sqliteUpgrade php5-suhosinUpgrade php53-gettextUpgrade php7-bcmathUpgrade php5-wddxUpgrade php7-ldapUpgrade php53-exifUpgrade libgd3-32bitUpgrade php53-fileinfoUpgrade php53-wddxUpgrade php7-zlibUpgrade php7-snmpUpgrade php7-mcryptUpgrade php53-xmlwriterUpgrade apache2-mod_php5Upgrade php5-enchantUpgrade php5-intlUpgrade php7-socketsUpgrade php53-ftpUpgrade php5-dbaUpgrade php53-intlUpgrade php53-opensslUpgrade php53-posixUpgrade php5-fpm | Aug 30, 2017 | Aug 2, 2017 |
| Ubuntu | — | Upgrade libgd-tools | Aug 15, 2017 | Aug 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub