Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-6363
HistoryFeb 27, 2020 - 5:15 a.m.

CVE-2017-6363

2020-02-2705:15:11
CWE-125
[email protected]
web.nvd.nist.gov
4

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

AI Score

8.1

Confidence

High

EPSS

0.002

Percentile

55.2%

JSON

In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor says "In my opinion this issue should not have a CVE, since the GD and GD2 formats are documented to be ‘obsolete, and should only be used for development and testing purposes.’

Affected configurations

Nvd
Node
libgdlibgdRange≤2.2.5
VendorProductVersionCPE
libgdlibgd*cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*

Related

nessus 5
ubuntucve 1
photon 4
veracode 1
debiancve 1
cvelist 1
alpinelinux 1
prion 1
cve 1
cloudlinux 2
openvas 3
ubuntu 1
osv 1
cloudfoundry 1
nessus
nessus
Photon OS 3.0: Libgd PHSA-2020-3.0-0072
2024-07-22 00:00:00
Photon OS 2.0: Libgd PHSA-2020-2.0-0223
2020-04-10 00:00:00
EulerOS 2.0 SP8 : gd (EulerOS-SA-2020-1802)
2020-07-30 00:00:00
ubuntucve
ubuntucve
CVE-2017-6363
2020-02-27 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2020-0072
2020-03-24 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0072
2020-03-24 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0223
2020-03-30 00:00:00
veracode
veracode
Heap-based Buffer Overflow
2020-02-28 01:43:10
debiancve
debiancve
CVE-2017-6363
2020-02-27 05:15:11
cvelist
cvelist
CVE-2017-6363
2020-02-27 04:06:43
alpinelinux
alpinelinux
CVE-2017-6363
2020-02-27 05:15:11
prion
prion
Heap overflow
2020-02-27 05:15:00
cve
cve
CVE-2017-6363
2020-02-27 05:15:11
cloudlinux
cloudlinux
Fix of CVE: CVE-2017-6363, CVE-2021-40145
2021-10-19 13:31:03
Fix of CVE: CVE-2017-6363, CVE-2021-40145
2021-10-28 16:47:16
openvas
openvas
Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2020-1901)
2020-08-31 00:00:00
Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2020-1802)
2020-07-31 00:00:00
Ubuntu: Security Advisory (USN-5068-1)
2021-09-09 00:00:00
ubuntu
ubuntu
GD library vulnerabilities
2021-09-08 00:00:00
osv
osv
libgd2 vulnerabilities
2021-09-08 13:08:35
cloudfoundry
cloudfoundry
USN-5068-1: GD library vulnerabilities | Cloud Foundry
2021-10-04 00:00:00

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

AI Score

8.1

Confidence

High

EPSS

0.002

Percentile

55.2%

JSON
Related for NVD:CVE-2017-6363
nessus5ubuntucve1photon4veracode1debiancve1cvelist1alpinelinux1prion1cve1cloudlinux2openvas3ubuntu1osv1cloudfoundry1