PT-2018-1886 · Php+4 · Php+4
Published
2018-01-08
·
Updated
2024-06-15
·
CVE-2018-5711
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
GD Graphics Library (libgd) versions prior to 2.2.5, as used in PHP versions prior to 5.6.33, 7.0.x prior to 7.0.27, 7.1.x prior to 7.1.13, and 7.2.x prior to 7.2.1
Description
The issue is related to an integer signedness error in the
gd gif in.c file of the GD Graphics Library, which can lead to an infinite loop when processing a crafted GIF file. This can be triggered by a call to the imagecreatefromgif or imagecreatefromstring PHP function, which utilizes the gdImageCreateFromGifCtx function. The error can be exploited by a remote attacker to cause a denial of service using a specially crafted GIF file.Recommendations
For PHP versions prior to 5.6.33, update to version 5.6.33 or later.
For PHP 7.0.x versions prior to 7.0.27, update to version 7.0.27 or later.
For PHP 7.1.x versions prior to 7.1.13, update to version 7.1.13 or later.
For PHP 7.2.x versions prior to 7.2.1, update to version 7.2.1 or later.
As a temporary workaround, consider avoiding the use of the
imagecreatefromgif and imagecreatefromstring PHP functions until a patch is available.Exploit
Fix
Infinite Loop
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Gd Graphics Library
Php
Suse
Ubuntu