PT-2018-2553 · Gd+2 · Libgd+2

Rooney + 1 · Published 2018-07-14 · Updated 2024-06-15 · CVE-2018-1000222

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Libgd version 2.2.5

Description The issue is related to a Double Free Vulnerability in the gdImageBmpPtr function, which can result in Remote Code Execution. This can be triggered by a specially crafted JPEG image, causing a double free. The vulnerability appears to have been fixed after a specific commit.

Recommendations For Libgd version 2.2.5, update to a version that includes the fix after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5 to resolve the issue. As a temporary workaround, consider restricting the use of the gdImageBmpPtr function until a patch is available. Avoid using specially crafted JPEG images that can trigger the double free vulnerability.

Exploit

Fix

RCE

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

BDU:2019-00968

CVE-2018-1000222

DLA-1651-1

MGASA-2018-0367

OPENSUSE-SU-2018_2849-1

OPENSUSE-SU-2018_2851-1

OPENSUSE-SU-2018_2941-1

OPENSUSE-SU-2022_4067-1

OPENSUSE-SU-2024:10777-1

OPENSUSE-SU-2024:11167-1

OPENSUSE-SU-2024:11169-1

SUSE-SU-2018:2837-1

SUSE-SU-2018:2840-1

SUSE-SU-2018:2888-1

SUSE-SU-2018_2837-1

SUSE-SU-2018_2840-1

SUSE-SU-2018_2888-1

SUSE-SU-2022:4067-1

USN-3755-1

Affected Products

Libgd

Suse

Ubuntu

References · 184

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/php_fpm_rce.rb · Exploit
• 🔥 https://github.com/theMiddleBlue/CVE-2019-11043 · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-11043 · Exploit
• 🔥 https://github.com/akamajoris/CVE-2019-11043-Docker · Exploit
• 🔥 https://github.com/k8gege/CVE-2019-11043 · Exploit
• 🔥 https://github.com/0th3rs-Security-Team/CVE-2019-11043 · Exploit
• 🔥 https://github.com/kriskhub/CVE-2019-11043 · Exploit
• 🔥 https://github.com/ypereirareis/docker-CVE-2019-11043 · Exploit
• 🔥 https://github.com/AleWong/PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043- · Exploit
• 🔥 https://github.com/lindemer/CVE-2019-11043 · Exploit
• 🔥 https://github.com/huowen/CVE-2019-11043 · Exploit
• 🔥 https://github.com/amitlttwo/CVE-2022-31626 · Exploit
• 🔥 https://github.com/MRdoulestar/CVE-2019-11043 · Exploit
• 🔥 https://github.com/silnex/CVE-2022-31629-poc · Exploit
• https://ubuntu.com/security/CVE-2018-5711 · Vendor Advisory