CVE-2018-14553
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.4%
gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).
Produtos afetados
n/a · n/aReferências
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=1599032https://github.com/libgd/libgd/commit/a93eac0e843148dc2d631c3ba80af17e9c8c860fhttps://github.com/libgd/libgd/pull/580https://lists.debian.org/debian-lts-announce/2020/02/msg00014.htmlhttps://lists.debian.org/debian-lts-announce/2024/04/msg00003.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/https://usn.ubuntu.com/4316-1/https://usn.ubuntu.com/4316-2/