Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:2837-1

Опубликовано: 24 сент. 2018
Источник: suse-cvrf

Описание

Security update for gd

This update for gd fixes the following issues:

Security issue fixed:

  • CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr() that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. (bsc#1105434)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP3
gd-2.1.0-24.9.1
gd-32bit-2.1.0-24.9.1
SUSE Linux Enterprise Server 12 SP3
gd-2.1.0-24.9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
gd-2.1.0-24.9.1
SUSE Linux Enterprise Software Development Kit 12 SP3
gd-devel-2.1.0-24.9.1
SUSE Linux Enterprise Workstation Extension 12 SP3
gd-32bit-2.1.0-24.9.1

Ссылки

Описание

Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:gd-2.1.0-24.9.1
SUSE Linux Enterprise Desktop 12 SP3:gd-32bit-2.1.0-24.9.1
SUSE Linux Enterprise Server 12 SP3:gd-2.1.0-24.9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3:gd-2.1.0-24.9.1
Ссылки