Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-9709

Опубликовано: 30 мар. 2015
Источник: ubuntu
Приоритет: low
EPSS Средний
CVSS2: 5

Описание

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.

РелизСтатусПримечание
devel

not-affected

2.1.0-5
esm-infra-legacy/trusty

not-affected

2.1.0-3ubuntu0.1
esm-infra/xenial

not-affected

2.1.0-5
lucid

ignored

end of life
precise

released

2.0.36~rc1~dfsg-6ubuntu2.1
trusty

released

2.1.0-3ubuntu0.1
trusty/esm

not-affected

2.1.0-3ubuntu0.1
upstream

released

2.1.0-5
utopic

ignored

end of life
vivid

not-affected

2.1.0-5

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

not-affected

lucid

not-affected

precise

not-affected

trusty

not-affected

trusty/esm

not-affected

upstream

released

5.6.5+dfsg-1
utopic

not-affected

vivid

not-affected

vivid/stable-phone-overlay

DNE

Показывать по

EPSS

Процентиль: 94%
0.14754
Средний

5 Medium

CVSS2

Связанные уязвимости

redhat
больше 10 лет назад

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.

nvd
около 10 лет назад

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.

debian
около 10 лет назад

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used ...

suse-cvrf
около 10 лет назад

Security update for gd

suse-cvrf
около 10 лет назад

Security update for gd

EPSS

Процентиль: 94%
0.14754
Средний

5 Medium

CVSS2