CVE-2019-6977
Description
gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.
Risk Information
Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
87.335
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| GD Graphics Library (USN-3060-1) libgd3_2.1.0-3ubuntu0.8_amd64.deb | Linux |
| LibGD vulnerability (USN-3389-1) libgd-tools_2.1.0-3ubuntu0.8_i386.deb | Linux |
| LibGD vulnerability (USN-3389-1) libgd-tools_2.1.0-3ubuntu0.8_amd64.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd3_2.2.5-4ubuntu0.3_i386.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd3_2.2.5-4ubuntu0.3_amd64.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd3_2.2.5-4ubuntu1.1_i386.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd3_2.2.5-4ubuntu1.1_amd64.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd3_2.1.0-3ubuntu0.11_i386.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd3_2.1.0-3ubuntu0.11_amd64.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd3_2.1.1-4ubuntu0.16.04.11_i386.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd3_2.1.1-4ubuntu0.16.04.11_amd64.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd-tools_2.2.5-4ubuntu0.3_i386.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd-tools_2.2.5-4ubuntu0.3_amd64.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd-tools_2.2.5-4ubuntu1.1_i386.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd-tools_2.2.5-4ubuntu1.1_amd64.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd-tools_2.1.0-3ubuntu0.11_i386.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd-tools_2.1.0-3ubuntu0.11_amd64.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd-tools_2.1.1-4ubuntu0.16.04.11_i386.deb | Linux |
| GD Graphics Library (USN-3900-1) libgd-tools_2.1.1-4ubuntu0.16.04.11_amd64.deb | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) apache2-mod_php53-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) apache2-mod_php53-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-bcmath-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-bcmath-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-bz2-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-bz2-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-calendar-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-calendar-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-ctype-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-ctype-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-curl-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-curl-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-dba-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-dba-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-dom-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-dom-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-exif-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-exif-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-fastcgi-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-fastcgi-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-fileinfo-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-fileinfo-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-ftp-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-ftp-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-gd-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-gd-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-gettext-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-gettext-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-gmp-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-gmp-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-iconv-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-iconv-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-intl-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-intl-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-json-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-json-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-ldap-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-ldap-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-mbstring-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-mbstring-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-mcrypt-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-mcrypt-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-mysql-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-mysql-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-odbc-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-odbc-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-openssl-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-openssl-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-pcntl-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-pcntl-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-pdo-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-pdo-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-pear-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-pear-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-pgsql-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-pgsql-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-pspell-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-pspell-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-shmop-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-shmop-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-snmp-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-snmp-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-soap-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-soap-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-suhosin-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-suhosin-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-sysvmsg-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-sysvmsg-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-sysvsem-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-sysvsem-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-sysvshm-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-sysvshm-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-tokenizer-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-tokenizer-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-wddx-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-wddx-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-xmlreader-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-xmlreader-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-xmlrpc-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-xmlrpc-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-xmlwriter-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-xmlwriter-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-xsl-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-xsl-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-zip-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-zip-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-zlib-5.3.17-112.53.1.i586.rpm | Linux |
| SUSE-SU-2019:13961-1(SUSE Linux Enterprise Server 11-SP4 ) php53-zlib-5.3.17-112.53.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0747-1(SUSE Linux Enterprise Desktop 12-SP4 ) gd-2.1.0-24.12.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0747-1(SUSE Linux Enterprise Desktop 12-SP4 ) gd-32bit-2.1.0-24.12.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0747-1(SUSE Linux Enterprise Desktop 12-SP4 ) gd-debuginfo-2.1.0-24.12.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0747-1(SUSE Linux Enterprise Desktop 12-SP4 ) gd-debuginfo-32bit-2.1.0-24.12.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0747-1(SUSE Linux Enterprise Desktop 12-SP4 ) gd-debugsource-2.1.0-24.12.1.x86_64.rpm | Linux |
| gd security update (RLSA-2020:4659) gd-2.2.5-7.el8.i686.rpm | Linux |
| gd security update (RLSA-2020:4659) gd-2.2.5-7.el8.x86_64.rpm | Linux |
| gd security update (RLSA-2020:4659) gd-devel-2.2.5-7.el8.i686.rpm | Linux |
| gd security update (RLSA-2020:4659) gd-devel-2.2.5-7.el8.x86_64.rpm | Linux |
| Gd update (ELSA-2020-4659) gd-2.2.5-7.el8.i686.rpm | Linux |
| Gd update (ELSA-2020-4659) gd-2.2.5-7.el8.x86_64.rpm | Linux |
| Gd-devel update (ELSA-2020-4659) gd-devel-2.2.5-7.el8.i686.rpm | Linux |
| Gd-devel update (ELSA-2020-4659) gd-devel-2.2.5-7.el8.x86_64.rpm | Linux |
| Moderate: gd security update gd-2.2.5-7.el8.i686.rpm | Linux |
| Moderate: gd security update gd-2.2.5-7.el8.x86_64.rpm | Linux |
| Moderate: gd security update gd-devel-2.2.5-7.el8.i686.rpm | Linux |
| Moderate: gd security update gd-devel-2.2.5-7.el8.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234