Skip to content
OpenAdvisories
Unscored RHSA-2008:0146 7 CVEs

Red Hat Security Advisory: gd security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as gd 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::as gd-debuginfo 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::as gd-devel 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::as gd-progs 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::desktop gd 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::desktop gd-debuginfo 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::desktop gd-devel 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::desktop gd-progs 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::es gd 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::es gd-debuginfo 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::es gd-devel 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::es gd-progs 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::ws gd 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::ws gd-debuginfo 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::ws gd-devel 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::ws gd-progs 0:2.0.28-5.4E.el4_6.1
Red Hat · RHEL 5 enterprise_linux:5::client gd 0:2.0.33-9.4.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client gd-debuginfo 0:2.0.33-9.4.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client gd-progs 0:2.0.33-9.4.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation gd 0:2.0.33-9.4.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation gd-debuginfo 0:2.0.33-9.4.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation gd-devel 0:2.0.33-9.4.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::server gd 0:2.0.33-9.4.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::server gd-debuginfo 0:2.0.33-9.4.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::server gd-devel 0:2.0.33-9.4.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::server gd-progs 0:2.0.33-9.4.el5_1.1

Vulnerabilities 7

  • Unscored —
    CVE-2006-4484

    Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows…

    libgd2 xloadimage Debian
  • Unscored —
    CVE-2007-0455 EPSS 12%

    Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote att…

    libgd2 Debian
  • Unscored —
    CVE-2007-2756

    The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption…

    libgd2 Debian
  • Unscored —
    CVE-2007-3472

    Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assist…

    libgd2 Debian
  • Unscored —
    CVE-2007-3473 Public exploit EPSS 13%

    The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to…

    libgd2 Debian
  • Unscored —
    CVE-2007-3475

    The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash…

    libgd2 Debian
  • Unscored —
    CVE-2007-3476

    Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers…

    libgd2 libwmf racket Debian

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=224607
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=242033
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=276751
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=276791
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=277181
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=277201
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431568
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0146.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-4484
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4484
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4484
  • report
    https://access.redhat.com/security/cve/CVE-2007-0455
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0455
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0455
  • report
    https://access.redhat.com/security/cve/CVE-2007-2756
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2756
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2756
  • report
    https://access.redhat.com/security/cve/CVE-2007-3472
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3472
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3472
  • report
    https://access.redhat.com/security/cve/CVE-2007-3473
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3473
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3473
  • report
    https://access.redhat.com/security/cve/CVE-2007-3475
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3475
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3475
  • report
    https://access.redhat.com/security/cve/CVE-2007-3476
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3476
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3476