Lucene search

CVE-2014-2497

🗓️ 21 Mar 2014 00:00:00Reported by ubuntu.comType

The gdImageCreateFromXpm function in libgd allows remote denial of service via crafted color table in XPM file

Reporter	Title	Published	Views	Family All 126
Tenable Nessus	Mandriva Linux Security Advisory : gd (MDVSA-2014:133)	11 Jul 201400:00	–	nessus
Tenable Nessus	Fedora 20 : gd-2.1.0-6.fc20 (2014-8458)	15 Aug 201400:00	–	nessus
Tenable Nessus	Fedora 21 : gd-2.1.0-8.fc21 (2015-0432)	20 Jan 201500:00	–	nessus
Tenable Nessus	Fedora 20 : gd-2.1.0-8.fc20 (2015-0503)	21 Jan 201500:00	–	nessus
Tenable Nessus	Debian DSA-3215-1 : libgd2 - security update	8 Apr 201500:00	–	nessus
Tenable Nessus	Debian DLA-189-1 : libgd2 security update	9 Apr 201500:00	–	nessus
Tenable Nessus	SUSE SLES11 Security Update : PHP5 (SUSE-SU-2014:0868-1)	20 May 201500:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : libgd (MDVSA-2015:153)	30 Mar 201500:00	–	nessus
Tenable Nessus	GLSA-201607-04 : GD: Multiple vulnerabilities	18 Jul 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : php5 (openSUSE-SU-2014:0784-1)	13 Jun 201400:00	–	nessus

Source	Link
net-ninja-mr	www.net-ninja-mr.me/2014/03/14/php-gd-v5-4-17-2-color-visual-null-pointer-dereference/
ubuntu	www.ubuntu.com/security/notices/USN-2987-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-2497
launchpad	www.launchpad.net/bugs/cve/CVE-2014-2497
security-tracker	www.security-tracker.debian.org/tracker/CVE-2014-2497

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	12.04	noarch	libgd2	2.0.36~rc1~dfsg-6ubuntu2.1	UNKNOWN
ubuntu	14.04	noarch	libgd2	2.1.0-3ubuntu0.1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Mar 2014 00:00Current

3.8Low risk

Vulners AI Score3.8

CVSS24.3

EPSS0.010