NULL pointer dereference in libgd - CVE-2018-14553

Vulnerability identifier: #VU26344

CSH Severity: Low

CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-14553

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the gdImageClone() function in gd.c file in libgd. A remote attacker can trigger denial of service conditions via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).

libgd
gd (Alpine package)
libgd2 (Ubuntu package)
gd (Red Hat package)
gd
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Slackware Linux
Opensuse
Fedora

Install update from vendor's website.

libgd - update to 2.3.0
libgd2 (Ubuntu package) - addressed in versions 2.1.1-4ubuntu0.16.04.12, 2.2.5-4ubuntu0.4, 2.2.5-5.2ubuntu0.19.10.1
gd (Alpine package) - addressed in versions 2.2.5-r3, 2.2.5-r4
gd (Red Hat package) - update to 2.2.5-7.el8
gd - update to 2.3.0-1.fc32

• https://bugzilla.redhat.com/show_bug.cgi?id=1599032
• https://github.com/libgd/libgd/commit/a93eac0e843148dc2d631c3ba80af17e9c8c860f
• https://github.com/libgd/libgd/pull/580
• https://lists.debian.org/debian-lts-announce/2020/02/msg00014.html

• Denial of service in libgd
• Slackware Linux update for gd
• OpenSUSE Linux update for gd
• Ubuntu update for GD Graphics Library
• NULL pointer dereference in gd (Alpine package)
• Red Hat Enterprise Linux 8 update for gd
• Fedora 32 update for gd