Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-1000222

Опубликовано: 20 авг. 2018
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libgd:libgd:2.2.5:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Конфигурация 3
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 79%
0.0128
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-415

Связанные уязвимости

ubuntu логотип

CVE-2018-1000222

CVSS3: 8.8
ubuntu
больше 7 лет назад

Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.

redhat логотип

CVE-2018-1000222

CVSS3: 5.3
redhat
больше 7 лет назад

Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.

debian логотип

CVE-2018-1000222

CVSS3: 8.8
debian
больше 7 лет назад

Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability ...

suse-cvrf логотип

openSUSE-SU-2018:2941-1

suse-cvrf
больше 7 лет назад

Security update for gd

suse-cvrf логотип

openSUSE-SU-2018:2851-1

suse-cvrf
больше 7 лет назад

Security update for gd

EPSS

Процентиль: 79%
0.0128
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-415