MGASA-2018-0367

Dashboard / Vulnerabilities / MGASA-2018-0367

MGASA-2018-0367

Summary: Updated libgd packages fix security vulnerabilities

Details: The updated packages fix security vulnerabilities: gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx (CVE-2018-5711). Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free (CVE-2018-1000222).

References: https://advisories.mageia.org/MGASA-2018-0367.html, https://bugs.mageia.org/show_bug.cgi?id=23496, https://usn.ubuntu.com/3755-1/