Summary
It was discovered that GD Graphics Library incorrectly handled certain GD and GD2 files.
An attacker could possibly use this issue to cause a crash or expose sensitive information.
This issue only affected Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 ESM, and Ubuntu 14.04 ESM.
(CVE-2017-6363)
It was discovered that GD Graphics Library incorrectly handled certain TGA files.
An attacker could possibly use this issue to cause a denial of service or
expose sensitive information. (CVE-2021-381)
It was discovered that GD Graphics Library incorrectly handled certain files.
An attacker could possibly use this issue to cause a crash.
(CVE-2021-40145)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libgd2 | 2.2.5-4ubuntu0.5 |
| Ubuntu · 20.04 LTS 20.04:LTS | libgd2 | 2.2.5-5.2ubuntu2.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libgd2 | 2.1.0-3ubuntu0.11+esm2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libgd2 | 2.1.1-4ubuntu0.16.04.12+esm1 |
Vulnerabilities 3
-
Unscored —
In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c…
-
Unscored —
read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a den…
-
Unscored —
gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's po…