| Package | Affected versions | Patched versions |
|---|---|---|
| libgd | = 2.1.0≥ 2.1.1, ≤ 2.2.5 |
gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free