Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2017-6363
HistoryFeb 27, 2020 - 12:00 a.m.

CVE-2017-6363

2020-02-2700:00:00
ubuntu.com
ubuntu.com
9

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.002 Low

EPSS

Percentile

54.5%

JSON

DISPUTED In the GD Graphics Library (aka LibGD) through 2.2.5, there
is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the
vendor says “In my opinion this issue should not have a CVE, since the GD
and GD2 formats are documented to be ‘obsolete, and should only be used for
development and testing purposes.’”

Notes

Author Note
mdeslaur php uses the system libgd2
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlibgd2< 2.2.5-4ubuntu0.5UNKNOWN
ubuntu20.04noarchlibgd2< 2.2.5-5.2ubuntu2.1UNKNOWN
ubuntu14.04noarchlibgd2< 2.1.0-3ubuntu0.11+esm2) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchlibgd2< 2.1.1-4ubuntu0.16.04.12+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu18.04noarchlibwmf< anyUNKNOWN
ubuntu20.04noarchlibwmf< anyUNKNOWN
ubuntu22.04noarchlibwmf< anyUNKNOWN
ubuntu23.10noarchlibwmf< anyUNKNOWN
ubuntu16.04noarchlibwmf< anyUNKNOWN

Related

nessus 4
alpinelinux 1
photon 4
veracode 1
debiancve 1
prion 1
cve 1
cloudlinux 2
openvas 3
cloudfoundry 1
osv 1
ubuntu 1
nessus
nessus
Photon OS 2.0: Libgd PHSA-2020-2.0-0223
2020-04-10 00:00:00
EulerOS Virtualization for ARM 64 3.0.6.0 : gd (EulerOS-SA-2020-1901)
2020-08-28 00:00:00
EulerOS 2.0 SP8 : gd (EulerOS-SA-2020-1802)
2020-07-30 00:00:00
alpinelinux
alpinelinux
CVE-2017-6363
2020-02-27 05:15:00
photon
photon
Important Photon OS Security Update - PHSA-2020-0072
2020-03-24 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0072
2020-03-24 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0223
2020-03-30 00:00:00
veracode
veracode
Heap-based Buffer Overflow
2020-02-28 01:43:10
debiancve
debiancve
CVE-2017-6363
2020-02-27 05:15:00
prion
prion
Heap overflow
2020-02-27 05:15:00
cve
cve
CVE-2017-6363
2020-02-27 05:15:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2017-6363, CVE-2021-40145
2021-10-19 13:31:03
Fix of CVE: CVE-2017-6363, CVE-2021-40145
2021-10-28 16:47:16
openvas
openvas
Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2020-1901)
2020-08-31 00:00:00
Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2020-1802)
2020-07-31 00:00:00
Ubuntu: Security Advisory (USN-5068-1)
2021-09-09 00:00:00
cloudfoundry
cloudfoundry
USN-5068-1: GD library vulnerabilities | Cloud Foundry
2021-10-04 00:00:00
osv
osv
libgd2 vulnerabilities
2021-09-08 13:08:35
ubuntu
ubuntu
GD library vulnerabilities
2021-09-08 00:00:00

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.002 Low

EPSS

Percentile

54.5%

JSON
Related for UB:CVE-2017-6363
nessus4alpinelinux1photon4veracode1debiancve1prion1cve1cloudlinux2openvas3cloudfoundry1osv1ubuntu1