CVE-2018-1000222
Fixed in a distro release EPSS 4%
Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.
Products: libgd, canonical ubuntu_linux, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | gd | 2.2.5-r1 |
| Alpine 3.11 | gd | 2.2.5-r1 |
| Alpine 3.12 | gd | 2.2.5-r1 |
| Alpine 3.13 | gd | 2.2.5-r1 |
| Alpine 3.14 | gd | 2.2.5-r1 |
| Alpine 3.15 | gd | 2.2.5-r1 |
| Alpine 3.16 | gd | 2.2.5-r1 |
| Alpine 3.17 | gd | 2.2.5-r1 |
| Alpine 3.18 | gd | 2.2.5-r1 |
| Alpine 3.19 | gd | 2.2.5-r1 |
| Alpine 3.20 | gd | 2.2.5-r1 |
| Alpine 3.21 | gd | 2.2.5-r1 |
| Alpine 3.22 | gd | 2.2.5-r1 |
| Alpine 3.23 | gd | 2.2.5-r1 |
| Alpine 3.24 | gd | 2.2.5-r1 |
| Alpine 3.5 | gd | 2.2.5-r1 |
| Alpine 3.6 | gd | 2.2.5-r1 |
| Alpine 3.7 | gd | 2.2.5-r1 |
| Alpine 3.8 | gd | 2.2.5-r1 |
| Alpine 3.9 | gd | 2.2.5-r1 |
| Arch Linux | gd | 2.2.5-2 |
| Debian 12 | libgd2 | 2.2.5-4.1 |
| Debian 13 | libgd2 | 2.2.5-4.1 |
| Debian 14 | libgd2 | 2.2.5-4.1 |
| Debian 8 | libgd2 | 2.1.0-5+deb8u12 |
| SUSE Enterprise Storage 6 | php7 | 7.2.34-150000.4.103.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | gd | 2.1.0-24.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | php7 | 7.2.34-150000.4.103.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | php7 | 7.2.34-150000.4.103.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | php7 | 7.2.34-150000.4.103.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | php7 | 7.2.34-150000.4.103.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | gd | 2.2.5-4.3.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | gd | 2.2.5-4.3.1 |
| SUSE Linux Enterprise Module for Web and Scripting 15 | php7 | 7.2.5-4.9.1 |
| SUSE Linux Enterprise Server 12 SP3 | gd | 2.1.0-24.9.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | php7 | 7.2.34-150000.4.103.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | php7 | 7.2.34-150000.4.103.1 |
| SUSE Linux Enterprise Server 15-LTSS | php7 | 7.2.34-150000.4.103.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | gd | 2.1.0-24.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | php7 | 7.2.34-150000.4.103.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | php7 | 7.2.34-150000.4.103.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | gd | 2.1.0-24.9.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP3 | gd | 2.1.0-24.9.1 |
| Ubuntu 14.04 LTS | libgd2 | 2.1.0-3ubuntu0.10 |
| Ubuntu 16.04 LTS | libgd2 | 2.1.1-4ubuntu0.16.04.10 |
| Ubuntu 18.04 LTS | libgd2 | 2.2.5-4ubuntu0.2 |
| openSUSE Leap 15.4 | php7 | 7.2.34-150000.4.103.1 |
| openSUSE Tumbleweed | gd | 2.3.3-1.1 |
| openSUSE Tumbleweed | php7 | 7.4.24-1.1 |
| openSUSE Tumbleweed | php8 | 8.0.11-1.1 |