USN-5068-1
Dashboard / Vulnerabilities / USN-5068-1
USN-5068-1
Summary: libgd2 vulnerabilities
Details: It was discovered that GD Graphics Library incorrectly handled certain GD and GD2 files. An attacker could possibly use this issue to cause a crash or expose sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 ESM, and Ubuntu 14.04 ESM. (CVE-2017-6363) It was discovered that GD Graphics Library incorrectly handled certain TGA files. An attacker could possibly use this issue to cause a denial of service or expose sensitive information. (CVE-2021-381) It was discovered that GD Graphics Library incorrectly handled certain files. An attacker could possibly use this issue to cause a crash. (CVE-2021-40145)
References: https://ubuntu.com/security/notices/USN-5068-1, https://ubuntu.com/security/CVE-2017-6363, https://ubuntu.com/security/CVE-2021-38115, https://ubuntu.com/security/CVE-2021-40145
Affected packages
Package
Name: libgd2
Purl: pkg:deb/ubuntu/libgd2?arch=source&distro=trusty%2Fesm
Affected ranges
Type: ECOSYSTEM
Events:
