Skip to content
OpenAdvisories
Unscored DLA-189-1 2 CVEs

libgd2 - security update

Published Apr 8, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 libgd2 2.0.36~rc1~dfsg-5+deb6u1

Vulnerabilities 2

  • Unscored —
    CVE-2014-2497 EPSS 20%

    The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to ca…

  • Unscored —
    CVE-2014-9709 EPSS 15%

    The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allo…