Summary
A vulnerability was discovered in GD Graphics Library (aka libgd),
as used in PHP that does not zero colorMap arrays before use.
A specially crafted GIF image could use the uninitialized tables to
read bytes from the top of the stack.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libgd2 | 2.1.0-3ubuntu0.7 |
| Ubuntu · 16.04 LTS 16.04:LTS | libgd2 | 2.1.1-4ubuntu0.16.04.7 |
Vulnerabilities 1
-
Unscored —
The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP…
References
-
report
https://ubuntu.com/security/CVE-2017-7890