Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:2888-1

Опубликовано: 27 сент. 2018
Источник: suse-cvrf

Описание

Security update for gd

This update for gd fixes the following issues:

Security issue fixed:

  • CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr() that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. (bsc#1105434)

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15
libgd3-2.2.5-4.3.1
SUSE Linux Enterprise Module for Desktop Applications 15
gd-2.2.5-4.3.1
gd-devel-2.2.5-4.3.1

Ссылки

Описание

Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15:libgd3-2.2.5-4.3.1
SUSE Linux Enterprise Module for Desktop Applications 15:gd-2.2.5-4.3.1
SUSE Linux Enterprise Module for Desktop Applications 15:gd-devel-2.2.5-4.3.1
Ссылки