CVE-2018-14553

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• libgd/libgd commit a93eac0 · Patch
• libgd/libgd#580 · Third Party Advisory
• lists.debian.org/debian-lts-announce/2020/02/msg00014.html · Mailing List
• lists.debian.org/debian-lts-announce/2024/04/msg00003.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6
• usn.ubuntu.com/4316-1 · Third Party Advisory
• usn.ubuntu.com/4316-2 · Third Party Advisory

libgd のその他の脆弱性

• CVE-2021-40812中 6.5The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return valu…
• CVE-2021-40145高 7.5gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 im…
• CVE-2021-38115中 6.5read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-o…
• CVE-2017-6363高 8.1In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor sa…
• CVE-2019-11038中 5.3When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions…