Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-14553
HistoryFeb 11, 2020 - 1:15 p.m.

CVE-2018-14553

2020-02-1113:15:11
CWE-476
[email protected]
web.nvd.nist.gov
9

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.013

Percentile

86.0%

JSON

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).

Affected configurations

Nvd
Node
libgdlibgdRange2.1.1–2.2.5
OR
libgdlibgdMatch2.1.0-
OR
libgdlibgdMatch2.1.0rc2
Node
fedoraprojectfedoraMatch32
Node
canonicalubuntu_linuxMatch14.04esm
OR
canonicalubuntu_linuxMatch16.04esm
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch19.10
Node
debiandebian_linuxMatch8.0
Node
opensuseleapMatch15.1
VendorProductVersionCPE
libgdlibgd*cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*
libgdlibgd2.1.0cpe:2.3:a:libgd:libgd:2.1.0:-:*:*:*:*:*:*
libgdlibgd2.1.0cpe:2.3:a:libgd:libgd:2.1.0:rc2:*:*:*:*:*:*
fedoraprojectfedora32cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
canonicalubuntu_linux14.04cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
canonicalubuntu_linux16.04cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
canonicalubuntu_linux18.04cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
canonicalubuntu_linux19.10cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
debiandebian_linux8.0cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
opensuseleap15.1cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Related

ubuntucve 1
debian 2
nessus 18
prion 1
redhatcve 1
mageia 1
openvas 13
alpinelinux 1
osv 6
veracode 1
debiancve 1
cvelist 1
cve 1
suse 1
ubuntu 2
cloudfoundry 1
rocky 1
oraclelinux 1
redhat 2
almalinux 1
photon 4
slackware 1
fedora 1
ubuntucve
ubuntucve
CVE-2018-14553
2020-02-11 00:00:00
debian
debian
[SECURITY] [DLA 2106-1] libgd2 security update
2020-02-18 02:01:36
[SECURITY] [DLA 3781-1] libgd2 security update
2024-04-06 23:26:18
nessus
nessus
Photon OS 3.0: Libgd PHSA-2020-3.0-0063
2020-03-02 00:00:00
Photon OS 2.0: Libgd PHSA-2020-2.0-0213
2020-03-11 00:00:00
Debian DLA-2106-1 : libgd2 security update
2020-02-18 00:00:00
prion
prion
Null pointer dereference
2020-02-11 13:15:00
redhatcve
redhatcve
CVE-2018-14553
2020-02-12 11:14:22
mageia
mageia
Updated libgd packages fix security vulnerability
2020-02-25 00:44:46
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0098)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-2106-1)
2020-02-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0594-1)
2021-06-09 00:00:00
alpinelinux
alpinelinux
CVE-2018-14553
2020-02-11 13:15:11
osv
osv
libgd2 - security update
2020-02-17 00:00:00
CVE-2018-14553
2020-02-11 13:15:11
Moderate: gd security update
2020-11-03 12:24:40
veracode
veracode
Denial Of Service (DoS)
2020-02-12 08:23:45
debiancve
debiancve
CVE-2018-14553
2020-02-11 13:15:11
cvelist
cvelist
CVE-2018-14553
2020-02-11 00:00:00
cve
cve
CVE-2018-14553
2020-02-11 13:15:11
suse
suse
Security update for gd (moderate)
2020-03-10 00:00:00
ubuntu
ubuntu
GD Graphics Library vulnerabilities
2020-04-02 00:00:00
GD Graphics Library vulnerabilities
2020-04-02 00:00:00
cloudfoundry
cloudfoundry
USN-4316-1: GD Graphics Library vulnerabilities | Cloud Foundry
2020-04-16 00:00:00
rocky
rocky
gd security update
2020-11-03 12:24:40
oraclelinux
oraclelinux
gd security update
2020-11-10 00:00:00
redhat
redhat
(RHSA-2020:4659) Moderate: gd security update
2020-11-03 12:24:40
(RHSA-2020:5633) Moderate: OpenShift Container Platform 4.7.0 security, bug fix, and enhancement update
2021-02-24 14:49:26
almalinux
almalinux
Moderate: gd security update
2020-11-03 12:24:40
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0213
2020-03-03 00:00:00
Important Photon OS Security Update - PHSA-2020-0213
2020-03-03 00:00:00
Important Photon OS Security Update - PHSA-2020-0063
2020-02-28 00:00:00
slackware
slackware
[slackware-security] gd
2020-03-23 20:45:50
fedora
fedora
[SECURITY] Fedora 32 Update: gd-2.3.0-1.fc32
2020-03-31 00:19:46

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.013

Percentile

86.0%

JSON
Related for NVD:CVE-2018-14553
ubuntucve1debian2nessus18prion1redhatcve1mageia1openvas13alpinelinux1osv6veracode1debiancve1cvelist1cve1suse1ubuntu2cloudfoundry1rocky1oraclelinux1redhat2almalinux1photon4slackware1fedora1