PT-2018-3816 · Php+7 · Libgd+7

Fabio Cabral Pacheco + 1 · Publicado 2018-07-12 · Atualizado 2024-06-15 · CVE-2018-14553

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libgd versions 2.1.0-rc2 through 2.2.5

Description The issue is related to a NULL pointer dereference in the gdImageClone function of the libgd library, specifically in the gd.c component. This allows a remote attacker to cause a denial of service by crashing an application through a specific sequence of function calls. It is noted that this only affects PHP when it is linked with an external libgd library, not when libgd is bundled with PHP.

Recommendations For libgd versions 2.1.0-rc2 through 2.2.5, consider updating to a version where this issue is fixed, as the current version allows attackers to crash applications via specific function calls. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALSA-2020:4659

BDU:2022-05698

CESA-2020_4659

CVE-2018-14553

DLA-2106-1

DLA-3781-1

MGASA-2020-0098

OPENSUSE-SU-2020:0332-1

OPENSUSE-SU-2020_0332-1

OPENSUSE-SU-2024:10777-1

RHSA-2020:4659

RHSA-2020_4659

RLSA-2020:4659

SUSE-SU-2020:0594-1

SUSE-SU-2020:0594-2

SUSE-SU-2020:0623-1

SUSE-SU-2020_0594-1

SUSE-SU-2020_0594-2

USN-4316-1

USN-4316-2

Produtos afetados

Almalinux

Astra Linux

Centos

Red Hat

Rocky Linux

Suse

Ubuntu

Libgd

Referências · 71

• https://github.com/libgd/libgd/commit/a93eac0e843148dc2d631c3ba80af17e9c8c860f · Correção
• https://github.com/libgd/libgd/pull/580 · Nota
• https://suse.com/security/cve/CVE-2016-10166 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-14553 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALPINE-CVE-2018-14553 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2022-05698 · Nota de Segurança
• https://bugs.mageia.org/show_bug.cgi?id=26220 · Nota
• https://suse.com/support/update/announcement/2020/suse-su-20200594-1 · Nota
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47 · Aviso do Fabricante
• https://bugzilla.suse.com/1050241 · Nota
• https://ubuntu.com/security/CVE-2018-14553 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-6912 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-5711 · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-14553 · Aviso do Fabricante