REDHAT-BUG-1671390: Double Free
First published: Thu Jan 31 2019(Updated: )
The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected. References: <a href="https://github.com/libgd/libgd/issues/492">https://github.com/libgd/libgd/issues/492</a> Upstream Patch: <a href="https://github.com/libgd/libgd/commit/553702980ae89c83f2d6e254d62cf82e204956d0">https://github.com/libgd/libgd/commit/553702980ae89c83f2d6e254d62cf82e204956d0</a> <a href="https://github.com/php/php-src/commit/089f7c0bc28d399b0420aa6ef058e4c1c120b2ae">https://github.com/php/php-src/commit/089f7c0bc28d399b0420aa6ef058e4c1c120b2ae</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GD Graphics Library |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/libgd/libgd/issues/492
- https://github.com/libgd/libgd/commit/553702980ae89c83f2d6e254d62cf82e204956d0
- https://github.com/php/php-src/commit/089f7c0bc28d399b0420aa6ef058e4c1c120b2ae
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1671391
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1671392
- https://access.redhat.com/errata/RHSA-2019:2722
- https://access.redhat.com/security/cve/cve-2019-6978
- https://access.redhat.com/errata/RHSA-2020:3943
- https://access.redhat.com/errata/RHSA-2020:4659
- https://bugzilla.redhat.com/show_bug.cgi?id=1671390
Frequently Asked Questions
What is the severity of REDHAT-BUG-1671390?
The vulnerability REDHAT-BUG-1671390 is classified as a medium severity due to the potential for a double free attack.
How do I fix REDHAT-BUG-1671390?
To fix REDHAT-BUG-1671390, update the GD Graphics Library to version 2.2.6 or later, which includes the necessary patches.
What systems are affected by REDHAT-BUG-1671390?
Systems utilizing GD Graphics Library version 2.2.5 are affected by REDHAT-BUG-1671390.
Is PHP affected by REDHAT-BUG-1671390?
No, PHP is not affected by the vulnerability described in REDHAT-BUG-1671390.
What are the key functions involved in REDHAT-BUG-1671390?
The key functions involved in REDHAT-BUG-1671390 are gdImage*Ptr() in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-6978
- agent/source
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/libgd
- canonical/gd graphics library