PT-2019-1692 · Gd+6 · Gd Graphics Library+6
Simon Scannell
·
Publicado
2019-01-15
·
Atualizado
2024-06-15
·
CVE-2019-6978
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
The GD Graphics Library version 2.2.5
Description
The issue is related to a double free error in the
gdImage*Ptr() functions within the files gd gif out.c, gd jpeg.c, and gd wbmp.c of the graphic library. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.Recommendations
For version 2.2.5, consider updating to a newer version that addresses the double free error in the
gdImage*Ptr() functions to prevent potential exploitation. As a temporary workaround, consider restricting the use of the gdImage*Ptr() functions in gd gif out.c, gd jpeg.c, and gd wbmp.c until a patch is available.Correção
Double Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Almalinux
Centos
Gd Graphics Library
Red Hat
Rocky Linux
Suse
Ubuntu