CVEDB API

Vulnerability Details CVE-2018-14553

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 72.9%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 4.3

References

Products affected by CVE-2018-14553

Libgd » Libgd » Version: 2.1.0

cpe:2.3:a:libgd:libgd:2.1.0
Libgd » Libgd » Version: 2.1.1

cpe:2.3:a:libgd:libgd:2.1.1
Libgd » Libgd » Version: 2.2.0

cpe:2.3:a:libgd:libgd:2.2.0
Libgd » Libgd » Version: 2.2.1

cpe:2.3:a:libgd:libgd:2.2.1
Libgd » Libgd » Version: 2.2.2

cpe:2.3:a:libgd:libgd:2.2.2
Libgd » Libgd » Version: 2.2.3

cpe:2.3:a:libgd:libgd:2.2.3
Libgd » Libgd » Version: 2.2.4

cpe:2.3:a:libgd:libgd:2.2.4
Libgd » Libgd » Version: 2.2.5

cpe:2.3:a:libgd:libgd:2.2.5
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 19.10

cpe:2.3:o:canonical:ubuntu_linux:19.10
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Fedoraproject » Fedora » Version: 32

cpe:2.3:o:fedoraproject:fedora:32
Opensuse » Leap » Version: 15.1

cpe:2.3:o:opensuse:leap:15.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-14553

Products

Pricing

Contact Us