PT-2017-17020 · Gd Library+2 · Libgd2+2

Varsleak

·

Publicado

2017-09-01

·

Atualizado

2024-06-15

·

CVE-2017-6362

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions libgd2 versions prior to 2.2.5
Description The issue is related to a double free vulnerability in the gdImagePngPtr function. This vulnerability can be exploited by remote attackers to cause a denial of service, specifically through vectors related to a palette with no colors.
Recommendations For versions prior to 2.2.5, update to version 2.2.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the gdImagePngPtr function until a patch is available.

Correção

DoS

Double Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

CVE-2017-6362
DLA-1106-1
DSA-3961-1
MGASA-2017-0351
MGASA-2017-0356
OPENSUSE-SU-2024:10777-1
SUSE-SU-2018:0135-1
SUSE-SU-2018_0135-1
USN-3410-1
USN-3410-2

Produtos afetados

Suse
Ubuntu
Libgd2