Asymmetric denial of service In gd
Description
gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
alpine v3.10 | 2.2.5-r3 | ||
alpine v3.11 | 2.2.5-r3 | ||
alpine v3.19 | 2.3.0-r0 | ||
alpine v3.12 | 2.3.0-r0 | ||
alpine v3.15 | 2.3.0-r0 | ||
alpine v3.8 | 2.2.5-r3 | ||
alpine v3.13 | 2.3.0-r0 | ||
alpine v3.14 | 2.3.0-r0 | ||
alpine v3.16 | 2.3.0-r0 | ||
alpine v3.20 | 2.3.0-r0 |
1-10 of 21
10
Aliases
1. 2. 3. 4. 5. 6. 7.