Summary
It was discovered that the GD Graphics Library did not perform proper
bounds checking while handling BMP and WebP files. If a user were tricked
into opening a specially crafted file, an attacker could possibly use
this issue to cause a denial of service (application crash).
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | libgd2 | 2.2.5-5.2ubuntu2.4 |
| Ubuntu · 22.04 LTS 22.04:LTS | libgd2 | 2.3.0-2ubuntu2.3 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libgd2 | 2.1.1-4ubuntu0.16.04.12+esm4 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libgd2 | 2.2.5-4ubuntu0.5+esm3 |
Vulnerabilities 1
-
Medium 6.5
The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and…
References
-
report
https://ubuntu.com/security/CVE-2021-40812