Описание
The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.1.0-5 |
| esm-infra-legacy/trusty | not-affected | 2.1.0-3ubuntu0.1 |
| esm-infra/xenial | not-affected | 2.1.0-5 |
| lucid | ignored | end of life |
| precise | released | 2.0.36~rc1~dfsg-6ubuntu2.1 |
| quantal | ignored | end of life |
| saucy | ignored | end of life |
| trusty | released | 2.1.0-3ubuntu0.1 |
| trusty/esm | not-affected | 2.1.0-3ubuntu0.1 |
| upstream | released | 2.1.0-4 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/trusty | not-affected | uses system gd |
| lucid | not-affected | uses system gd |
| precise | not-affected | uses system gd |
| quantal | not-affected | uses system gd |
| saucy | not-affected | uses system gd |
| trusty | not-affected | uses system gd |
| trusty/esm | not-affected | uses system gd |
| upstream | needs-triage | |
| utopic | not-affected | uses system gd |
Показывать по
EPSS
4.3 Medium
CVSS2
Связанные уязвимости
The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.
The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.
The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP ...
The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.
Уязвимость программного обеспечения PHP, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
EPSS
4.3 Medium
CVSS2