Known vulnerabilities in gd (Alpine package)

Vendor: Alpine Linux Development Team
Software: gd (Alpine package)
Software CPE: cpe:2.3:o:alpine:gd_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 23
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting gd (Alpine package) gd (Alpine package) is affected by 23 known vulnerabilities: 9 high, 7 medium, 7 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26344 - NULL Pointer Dereference
CVE-2018-14553		 CWE-476 Low
No
No
 2.2.5-r3, 2.2.5-r4 24.03.2020 SB2020021173
SB2020032412
SB2020031141
and 4 more
#VU17380 - Double Free
CVE-2019-6978		 CWE-415 High
No
No
 2.2.5-r2 06.02.2019 SB2019020608
SB2019021916
SB2019022811
and 19 more
#VU14596 - Double Free
CVE-2018-1000222		 CWE-415 High
No
No
 2.2.5-r1 03.09.2018 SB2018090309
SB2018092803
SB2018092505
and 7 more
#VU12094 - Double Free
CVE-2017-6362		 CWE-415 Low
No
No
 2.2.5-r0 23.04.2018 SB2017090510
SB2017090511
SB2017090302
and 9 more
#VU11789 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7890		 CWE-200 Low
No
No
 2.2.5-r0 09.04.2018 SB2017081404
SB2017081405
SB2017081208
and 9 more
#VU7576 - Integer overflow
CVE-2016-10168		 CWE-190 High
No
No
 2.2.4-r0 19.07.2017 SB2017071905
SB2017111512
SB2018050205
and 8 more
#VU7575 - Improper input validation
CVE-2016-10167		 CWE-20 Low
No
No
 2.2.4-r0 19.07.2017 SB2017071905
SB2017111512
SB2018050205
and 8 more
#VU7574 - Integer underflow
CVE-2016-10166		 CWE-191 High
No
No
 2.2.4-r0 19.07.2017 SB2017071905
SB2019011006
SB2017022702
and 6 more
#VU32119 - Out-of-bounds read
CVE-2016-6906		 CWE-125 Low
No
No
 2.2.4-r0 15.03.2017 SB2017031518
SB2016052309
#VU1003 - Heap-based Buffer Overflow
CVE-2016-7568		 CWE-190 Low
No
No
 2.2.3-r1, 2.2.4-r0 17.10.2016 SB2016102405
SB2016102113
SB2016120406
#VU32247 - Out-of-bounds read
CVE-2016-6214		 CWE-125 Medium
No
No
 2.1.1-r2 12.08.2016 SB2016081206
SB2016091419
SB2016072215
#VU32249 - Memory corruption
CVE-2016-6207		 CWE-119 Medium
No
No
 2.2.3-r0 12.08.2016 SB2016081208
SB2016091422
SB2016120406
and 3 more
#VU33630 - Out-of-bounds read
CVE-2016-6161		 CWE-125 Medium
No
No
 2.1.1-r2 12.08.2016 SB2016091418
SB2016091938
SB2016092025
#VU32248 - Out-of-bounds read
CVE-2016-6132		 CWE-125 Medium
No
No
 2.2.3-r0 12.08.2016 SB2016081207
SB2016091421
SB2016120406
and 1 more
#VU32246 - Improper input validation
CVE-2016-6128		 CWE-20 Medium
No
No
 2.1.1-r2 07.08.2016 SB2016080706
SB2016091417
SB2016120406
and 1 more
#VU32250 - Heap-based Buffer Overflow
CVE-2016-5767		 CWE-122 High
No
No
 2.2.3-r0 07.08.2016 SB2016080707
SB2016091420
SB2016062407
#VU32245 - Heap-based Buffer Overflow
CVE-2016-5766		 CWE-122 High
No
No
 2.1.1-r2 07.08.2016 SB2016080705
SB2016091416
SB2016120406
and 7 more
#VU33067 - Stack-based buffer overflow
CVE-2016-5116		 CWE-121 High
No
No
 2.1.1-r2 07.08.2016 SB2016080716
SB2016091415
SB2016052704
and 2 more
#VU33629 - Memory corruption
CVE-2015-8874		 CWE-119 Medium
No
No
 2.1.1-r2 16.05.2016 SB2016091414
SB2016062407
SB2016062408
#VU33631 - Heap-based Buffer Overflow
CVE-2016-3074		 CWE-122 High
Available
No
 2.1.1-r1 26.04.2016 SB2016052312
SB2016071602
SB2016043003
and 3 more


Showing elements 1 - 20 out of 23