Summary
It was discovered that the GD Graphics Library (aka libgd) incorrectly handled
certain malformed PNG images. A remote attacker could use this issue to cause the GD Graphics Library
to crash, resulting in a denial of service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libgd2 | 2.1.0-3ubuntu0.8 |
| Ubuntu · 16.04 LTS 16.04:LTS | libgd2 | 2.1.1-4ubuntu0.16.04.8 |
Vulnerabilities 1
-
Unscored —
Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denia…
References
-
report
https://ubuntu.com/security/CVE-2017-6362