Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-40145

Опубликовано: 26 авг. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes.

РелизСтатусПримечание
bionic

released

2.2.5-4ubuntu0.5
devel

released

2.3.0-2ubuntu1
esm-infra-legacy/trusty

released

2.1.0-3ubuntu0.11+esm2
esm-infra-legacy/xenial

released

2.1.1-4ubuntu0.16.04.12+esm1
esm-infra/bionic

released

2.2.5-4ubuntu0.5
esm-infra/focal

released

2.2.5-5.2ubuntu2.1
esm-infra/xenial

released

2.1.1-4ubuntu0.16.04.12+esm1
focal

released

2.2.5-5.2ubuntu2.1
hirsute

released

2.3.0-2ubuntu0.1
impish

released

2.3.0-2ubuntu1

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

not-affected

uses system gd
esm-infra/focal

DNE

focal

DNE

hirsute

DNE

impish

DNE

jammy

DNE

trusty

not-affected

uses system gd
trusty/esm

not-affected

uses system gd

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra-legacy/xenial

not-affected

uses system gd
esm-infra/focal

DNE

esm-infra/xenial

not-affected

uses system gd
focal

DNE

hirsute

DNE

impish

DNE

jammy

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

uses system gd
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

uses system gd
esm-infra/focal

DNE

focal

DNE

hirsute

DNE

impish

DNE

jammy

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

hirsute

DNE

impish

DNE

jammy

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

EPSS

Процентиль: 79%
0.02051
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
почти 5 лет назад

gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes.

CVSS3: 7.5
msrc
больше 4 лет назад

gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete and should only be used for development and testing purposes.

CVSS3: 7.5
debian
почти 5 лет назад

gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) throu ...

CVSS3: 7.5
github
около 4 лет назад

** DISPUTED ** gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes."

CVSS3: 7.5
fstec
около 5 лет назад

Уязвимость компонента gd_gd2.c графической библиотеки LibGD, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 79%
0.02051
Низкий

5 Medium

CVSS2

7.5 High

CVSS3