Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-9709
HistoryMar 30, 2015 - 10:59 a.m.

CVE-2014-9709

2015-03-3010:59:05
CWE-119
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.2 High

AI Score

Confidence

High

0.039 Low

EPSS

Percentile

92.0%

JSON

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.

Affected configurations

NVD
Node
phpphpRange5.4.0–5.4.40
OR
phpphpRange5.5.0–5.5.21
OR
phpphpRange5.6.0–5.6.5
Node
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2
Node
libgdlibgdRange≤2.1.1
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
Node
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch15.10
OR
canonicalubuntu_linuxMatch16.04lts

References

Related

nessus 39
openvas 22
cvelist 1
ubuntucve 1
f5 2
prion 1
debiancve 1
cve 1
osv 2
securityvulns 4
debian 3
gentoo 2
freebsd 1
cloudfoundry 1
ubuntu 1
amazon 1
suse 2
slackware 1
kaspersky 1
veracode 27
ibm 5
oraclelinux 4
redhat 4
centos 2
nessus
nessus
SuSE 11.3 Security Update : gd (SAT Patch Number 10530)
2015-05-08 00:00:00
openSUSE Security Update : gd (openSUSE-2015-280)
2015-04-01 00:00:00
EulerOS Virtualization 3.0.1.0 : gd (EulerOS-SA-2019-1463)
2019-05-14 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:0866-1)
2021-04-19 00:00:00
Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2019-1463)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0835-1)
2021-06-09 00:00:00
cvelist
cvelist
CVE-2014-9709
2015-03-30 10:00:00
ubuntucve
ubuntucve
CVE-2014-9709
2015-03-30 00:00:00
f5
f5
K17127 : PHP vulnerability CVE-2014-9709
2015-08-14 00:00:00
SOL17127 - PHP vulnerability CVE-2014-9709
2015-08-14 00:00:00
prion
prion
Design/Logic Flaw
2015-03-30 10:59:00
debiancve
debiancve
CVE-2014-9709
2015-03-30 10:59:05
cve
cve
CVE-2014-9709
2015-03-30 10:59:05
osv
osv
libgd2 - security update
2015-04-08 00:00:00
libgd2 - security update
2015-04-06 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3215-1] libgd2 security update
2015-04-07 00:00:00
libgd / PHP security vulnerabilities
2015-04-07 00:00:00
APPLE-SA-2015-09-30-3 OS X El Capitan 10.11
2015-10-05 00:00:00
debian
debian
[SECURITY] [DLA 189-1] libgd2 security update
2015-04-08 17:24:39
[SECURITY] [DSA 3215-1] libgd2 security update
2015-04-06 18:33:02
[SECURITY] [DSA 3215-1] libgd2 security update
2015-04-06 18:33:02
gentoo
gentoo
GD: Multiple vulnerabilities
2016-07-16 00:00:00
PHP: Multiple vulnerabilities
2016-06-19 00:00:00
freebsd
freebsd
Several vulnerabilities found in PHP
2015-04-16 00:00:00
cloudfoundry
cloudfoundry
USN-2987-1 GD library vulnerabilities | Cloud Foundry
2016-06-13 00:00:00
ubuntu
ubuntu
GD library vulnerabilities
2016-05-31 00:00:00
amazon
amazon
Important: php54
2015-04-17 12:04:00
suse
suse
Security update for php5 (important)
2015-05-13 15:07:04
Security update for php53 (important)
2016-06-21 13:08:17
slackware
slackware
[slackware-security] php
2015-04-22 01:22:40
kaspersky
kaspersky
KLA10514 Multiple vulnerabilities in PHP and plugins
2015-03-30 00:00:00
veracode
veracode
Remote Code Execution (RCE) Via Memory Corruption
2019-05-02 05:39:23
Memory Corruption
2019-05-02 05:39:23
Memory Corruption
2019-05-02 05:39:23
ibm
ibm
Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript.
2022-02-21 04:39:05
Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manger (FSM)
2019-01-31 02:10:01
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by multiple vulnerabilities in GNU C Library (glibc), krb5 and php
2020-11-02 20:22:51
oraclelinux
oraclelinux
php55 security and bug fix update
2016-02-04 00:00:00
php security update
2015-07-09 00:00:00
php54 security and bug fix update
2016-02-04 00:00:00
redhat
redhat
(RHSA-2015:1053) Moderate: php55 security and bug fix update
2015-06-04 00:00:00
(RHSA-2015:1218) Moderate: php security update
2015-07-09 00:00:00
(RHSA-2015:1066) Important: php54 security and bug fix update
2015-06-04 00:00:00
centos
centos
php security update
2015-07-09 19:23:41
php security update
2015-06-24 03:28:02

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.2 High

AI Score

Confidence

High

0.039 Low

EPSS

Percentile

92.0%

JSON
Related for NVD:CVE-2014-9709
nessus39openvas22cvelist1ubuntucve1f52prion1debiancve1cve1osv2securityvulns4debian3gentoo2freebsd1cloudfoundry1ubuntu1amazon1suse2slackware1kaspersky1veracode27ibm5oraclelinux4redhat4centos2