CVE-2018-1000222

Description

Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.28

Associated Vulnerability

Vulnerability	OS Platform
SUSE-SU-2018:2837-1(SUSE Linux Enterprise Desktop 12-SP3 ) gd-2.1.0-24.9.1.x86_64.rpm	Linux
SUSE-SU-2018:2837-1(SUSE Linux Enterprise Desktop 12-SP3 ) gd-32bit-2.1.0-24.9.1.x86_64.rpm	Linux
SUSE-SU-2018:2837-1(SUSE Linux Enterprise Desktop 12-SP3 ) gd-debuginfo-2.1.0-24.9.1.x86_64.rpm	Linux
SUSE-SU-2018:2837-1(SUSE Linux Enterprise Desktop 12-SP3 ) gd-debuginfo-32bit-2.1.0-24.9.1.x86_64.rpm	Linux
SUSE-SU-2018:2837-1(SUSE Linux Enterprise Desktop 12-SP3 ) gd-debugsource-2.1.0-24.9.1.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234