Description
The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libgd2 | 2.0.35.dfsg-1 | — |
| Debian 13 | libgd2 | 2.0.35.dfsg-1 | — |
| Debian 12 | libgd2 | 2.0.35.dfsg-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | gd +2 | 2.0.33-9.4.el5_1.1 | RHSA-2008:0146 |
| RHEL 4 | gd +2 | 2.0.28-5.4E.el4_6.1 | RHSA-2008:0146 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- GD Graphics Library 2.0.34 - 'libgd' gdImageCreateXbm Function Unspecified Denial of Service EDB-30251 · dos · Jun 26, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- RHSA-2008:0146 Red Hat Security Advisory: gd security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- gd-imagecreatexbm-dos(35109) vdb-entry
- 2007-0024 vendor-advisory
- MDKSA-2007:164 vendor-advisory
- 29157 third-party-advisory
- 37744 vdb-entry
- oval:org.mitre.oval:def:11806 vdb-entry signature
- 26415 third-party-advisory
- https://issues.rpath.com/browse/RPL-1643
- https://bugzilla.redhat.com/show_bug.cgi?id=277421
- 25855 third-party-advisory
- GLSA-200805-13 vendor-advisory
- 20070907 FLEA-2007-0052-1 gd mailing-list
- 26467 third-party-advisory
- 42813 third-party-advisory
- http://www.libgd.org/ReleaseNote020035
- GLSA-200708-05 vendor-advisory
- 30168 third-party-advisory
- FEDORA-2007-692 vendor-advisory
- ADV-2011-0022 vdb-entry
- 25860 third-party-advisory
- ADV-2007-2336 vdb-entry
- 26663 third-party-advisory
- FEDORA-2010-19033 vendor-advisory
- 26856 third-party-advisory
- 26272 third-party-advisory
- GLSA-200711-34 vendor-advisory
- RHSA-2008:0146 vendor-advisory
- FEDORA-2010-19022 vendor-advisory
- http://bugs.libgd.org/?do=details&task_id=94
- 24651 vdb-entry
- MDKSA-2007:153 vendor-advisory
- 26766 third-party-advisory
- 26390 third-party-advisory
- FEDORA-2007-2055 vendor-advisory