{"id":"CVE-2018-14553","aliases":["ALPINE-CVE-2018-14553","ALSA-2020:4659","BELL-CVE-2018-14553","DEBIAN-CVE-2018-14553","DLA-2106-1","DLA-3781-1","EUVD-2018-6462","GHSA-jw3x-9g83-4hvr","MGASA-2020-0098","RHSA-2020:4659","RLSA-2020:4659","SUSE-SU-2020:0594-1","SUSE-SU-2020:0594-2","SUSE-SU-2020:0623-1","UBUNTU-CVE-2018-14553","USN-4316-1","USN-4316-2","openSUSE-SU-2020:0332-1","openSUSE-SU-2024:10777-1"],"status":"published","title":"gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing...","description":"gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.03435,"percentile":0.89061,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2020-02-11T00:00:00Z","modified":"2026-10-29T11:00:14Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"gd","fixed_in":["2.2.5-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"gd","fixed_in":["2.2.5-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"gd","fixed_in":["2.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"gd","fixed_in":["2.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"gd","fixed_in":["2.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"gd","fixed_in":["2.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"gd","fixed_in":["2.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"gd","fixed_in":["2.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"gd","fixed_in":["2.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"gd","fixed_in":["2.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"gd","fixed_in":["2.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"gd","fixed_in":["2.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"gd","fixed_in":["2.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gd","fixed_in":["2.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gd","fixed_in":["2.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"gd","fixed_in":["2.2.5-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"gd","fixed_in":["2.2.5-r3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libgd2","fixed_in":["2.3.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libgd2","fixed_in":["2.3.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libgd2","fixed_in":["2.3.0-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"libgd2","fixed_in":["2.1.0-5+deb8u14"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libgd","fixed_in":["2.2.5-5.1.mga7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libgd2","fixed_in":["2.1.0-3ubuntu0.11+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libgd2","fixed_in":["2.1.1-4ubuntu0.16.04.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libgd2","fixed_in":["2.2.5-4ubuntu0.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-5+deb8u14"}]}],"versions":["2.1.0-5","2.1.0-5+deb8u1","2.1.0-5+deb8u10","2.1.0-5+deb8u11","2.1.0-5+deb8u12","2.1.0-5+deb8u13","2.1.0-5+deb8u2","2.1.0-5+deb8u3","2.1.0-5+deb8u4","2.1.0-5+deb8u5","2.1.0-5+deb8u6","2.1.0-5+deb8u7","2.1.0-5+deb8u8","2.1.0-5+deb8u9"]},{"source":"osv","ecosystem":"Debian:10","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-5.2+deb10u1"}]}],"versions":["2.2.5-5.2"],"bundled":3},{"source":"osv","ecosystem":"Mageia:7","package":"libgd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-5.1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gd-progs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.11+esm1"}]}],"versions":["2.1.0-2","2.1.0-3","2.1.0-3ubuntu0.1","2.1.0-3ubuntu0.2","2.1.0-3ubuntu0.3","2.1.0-3ubuntu0.5","2.1.0-3ubuntu0.6","2.1.0-3ubuntu0.7","2.1.0-3ubuntu0.8","2.1.0-3ubuntu0.10","2.1.0-3ubuntu0.11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.12"}]}],"versions":["2.1.1-4build1","2.1.1-4build2","2.1.1-4ubuntu0.16.04.1","2.1.1-4ubuntu0.16.04.2","2.1.1-4ubuntu0.16.04.3","2.1.1-4ubuntu0.16.04.5","2.1.1-4ubuntu0.16.04.6","2.1.1-4ubuntu0.16.04.7","2.1.1-4ubuntu0.16.04.8","2.1.1-4ubuntu0.16.04.10","2.1.1-4ubuntu0.16.04.11"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4ubuntu0.4"}]}],"versions":["2.2.5-3","2.2.5-4","2.2.5-4ubuntu0.2","2.2.5-4ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"doxygen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.13-10ubuntu3","1.8.13-11ubuntu1","1.8.13-12","1.8.13-12ubuntu1","1.8.16-2","1.8.16-2build1","1.8.17-0ubuntu1","1.8.17-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"doxygen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.1-2ubuntu1","1.9.1-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"doxygen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.4-4","1.9.8+ds-2","1.9.8+ds-2build1","1.9.8+ds-2build3","1.9.8+ds-2build5","1.9.8+ds-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"doxygen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.8+ds-2.1build1","1.9.8+ds-2.1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"doxygen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.15.0+ds1-1ubuntu3","1.15.0+ds1-1.1ubuntu1","1.15.0+ds1-1.1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"doxygen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.8+ds-2.1build1","1.15.0+ds1-1ubuntu2","1.15.0+ds1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.12"}]}],"versions":["2.1.1-4build1","2.1.1-4build2","2.1.1-4ubuntu0.16.04.1","2.1.1-4ubuntu0.16.04.2","2.1.1-4ubuntu0.16.04.3","2.1.1-4ubuntu0.16.04.5","2.1.1-4ubuntu0.16.04.6","2.1.1-4ubuntu0.16.04.7","2.1.1-4ubuntu0.16.04.8","2.1.1-4ubuntu0.16.04.10","2.1.1-4ubuntu0.16.04.11"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4ubuntu0.4"}]}],"versions":["2.2.5-3","2.2.5-4","2.2.5-4ubuntu0.2","2.2.5-4ubuntu0.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.11+esm1"}]}],"versions":["2.1.0-2","2.1.0-3","2.1.0-3ubuntu0.1","2.1.0-3ubuntu0.2","2.1.0-3ubuntu0.3","2.1.0-3ubuntu0.5","2.1.0-3ubuntu0.6","2.1.0-3ubuntu0.7","2.1.0-3ubuntu0.8","2.1.0-3ubuntu0.10","2.1.0-3ubuntu0.11"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-lp151.6.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-1.1"}]}],"bundled":14}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"libgd","product":"libgd"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599032","tags":["x_transferred","Issue Tracking","Permissions Required","report"]},{"url":"https://github.com/libgd/libgd/pull/580","tags":["x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://github.com/libgd/libgd/commit/a93eac0e843148dc2d631c3ba80af17e9c8c860f","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00014.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4316-2/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4316-1/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14553","tags":["advisory"]},{"url":"https://github.com/fcabralpacheco/libgd/commit/441cbfed60ebf6cb63b8ce120ed0a82b15e7aaf8"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6"},{"url":"https://usn.ubuntu.com/4316-1"},{"url":"https://usn.ubuntu.com/4316-2"},{"url":"https://github.com/advisories/GHSA-jw3x-9g83-4hvr"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-14553","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-4659.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2018-14553","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-6977","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-6978","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-14553","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-14553","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0098.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26220","tags":["report"]},{"url":"https://www.debian.org/lts/security/2020/dla-2106","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4659","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671390","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672207","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4659.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14553","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14553","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-6977","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-6977","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6977","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-6978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-6978","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6978","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:4659","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200594-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1140120","tags":["report"]},{"url":"https://bugzilla.suse.com/1165471","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11038","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200594-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200623-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1050241","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7890","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-14553","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4316-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4316-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-11038","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NWB66YOOIMGCJ5F2WRRSM2MM3KFYXNTZ/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6978","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-14553","description":"gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).","status":"published","published":"2020-02-11T00:00:00Z","modified":"2024-08-05T09:29:51.696Z","updated_at":"2026-11-02T14:35:00.237825Z"}],"euvd":[{"id":"EUVD-2018-6462","description":"gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).","status":"published","published":"2020-02-11T00:00:00Z","modified":"2024-08-05T09:29:51Z","updated_at":"2026-11-03T02:39:46.696329Z"}],"ghsa":[{"id":"GHSA-jw3x-9g83-4hvr","title":"gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing...","description":"gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing atteckers to crash an application via a specific function call sequence.","status":"published","published":"2022-05-24T17:08:23Z","modified":"2024-04-20T05:05:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:57:13.502248Z"}],"nvd":[{"id":"CVE-2018-14553","description":"gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).","status":"published","published":"2020-02-11T13:15:11.197Z","modified":"2026-06-17T01:41:11.167Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:05:00.03074Z"}],"osv":[{"id":"ALPINE-CVE-2018-14553","description":"gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).","status":"published","published":"2020-02-11T13:15:11.197Z","modified":"2026-10-23T17:17:55.215300794Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"BELL-CVE-2018-14553","title":"CVE-2018-14553 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:49.15957Z","modified":"2026-09-06T07:15:06.901593587Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-14553","description":"gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).","status":"published","published":"2020-02-11T13:15:11.197Z","modified":"2026-10-20T13:24:24.695638382Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:08.242347Z"},{"id":"DEBIAN-CVE-2018-14553","description":"gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).","status":"published","published":"2020-02-11T13:15:11.197Z","modified":"2026-10-23T18:02:59.50829687Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"RHSA-2020:4659","title":"Red Hat Security Advisory: gd security update","status":"published","published":"2024-09-16T04:05:10Z","modified":"2026-06-29T10:32:39Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RLSA-2020:4659","title":"Moderate: gd security update","description":"GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. \n\nSecurity Fix(es):\n\n* gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)\n\n* gd: NULL pointer dereference in gdImageClone (CVE-2018-14553)\n\n* gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:24:40Z","modified":"2026-02-05T14:00:10.843328Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2018-14553","description":"gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).","status":"published","published":"2020-02-11T13:15:00Z","modified":"2026-10-17T12:54:53.402247773Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:17.014176Z"},{"id":"ALSA-2020:4659","title":"Moderate: gd security update","description":"GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. \n\nSecurity Fix(es):\n\n* gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)\n\n* gd: NULL pointer dereference in gdImageClone (CVE-2018-14553)\n\n* gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:24:40Z","modified":"2026-10-29T11:00:14.499935688Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-2106-1","title":"libgd2 - security update","status":"published","published":"2020-02-17T00:00:00Z","modified":"2026-03-09T01:19:55.107727Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-3781-1","title":"libgd2 - security update","status":"published","published":"2024-04-07T00:00:00Z","modified":"2026-03-09T01:23:28.194643Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2020-0098","title":"Updated libgd packages fix security vulnerability","description":"The updated packages fix a security vulnerability:\n\ngdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer\ndereference allowing attackers to crash an application via a specific\nfunction call sequence. (CVE-2018-14553)\n","status":"published","published":"2020-02-24T21:44:46Z","modified":"2026-04-16T04:43:39.807599859Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0332-1","title":"Security update for gd","description":"This update for gd fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-14553: Fixed a null pointer dereference in gdImageClone (bsc#1165471).\n- CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm() (bsc#1140120).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-03-10T19:14:58Z","modified":"2026-02-04T02:27:52.228966Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10777-1","title":"gd-2.3.3-1.1 on GA media","description":"These are all security issues fixed in the gd-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:16:49.11313Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:0594-1","title":"Security update for gd","description":"This update for gd fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-14553: Fixed a null pointer dereference in gdImageClone (bsc#1165471).\n- CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm() (bsc#1140120).\n","status":"published","published":"2020-03-05T14:16:54Z","modified":"2026-02-04T04:22:51.690217Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0594-2","title":"Security update for gd","description":"This update for gd fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-14553: Fixed a null pointer dereference in gdImageClone (bsc#1165471).\n- CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm() (bsc#1140120).\n","status":"published","published":"2020-07-07T11:43:08Z","modified":"2026-02-04T02:55:19.203359Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0623-1","title":"Security update for gd","description":"This update for gd fixes the following issues:\n\n- CVE-2017-7890: Fixed a buffer over-read into uninitialized memory (bsc#1050241).\n- CVE-2018-14553: Fixed a null pointer dereference in gdImageClone() (bsc#1165471).\n- CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm() (bsc#1140120).\n","status":"published","published":"2020-03-09T15:17:43Z","modified":"2026-02-04T03:02:25.11285Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-4316-1","title":"libgd2 vulnerabilities","description":"It was discovered that GD Graphics Library incorrectly handled cloning an\nimage. An attacker could possibly use this issue to cause GD Graphics Library\nto crash, resulting in a denial of service. (CVE-2018-14553)\n\nIt was discovered that GD Graphics Library incorrectly handled loading images\nfrom X bitmap format files. An attacker could possibly use this issue to cause\nGD Graphics Library to crash, resulting in a denial of service, or to disclose\ncontents of the stack that has been left there by previous code. This issue\nonly affected Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2019-11038)\n","status":"published","published":"2020-04-02T22:06:16Z","modified":"2026-04-27T15:48:46.034315158Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4316-2","title":"libgd2 vulnerabilities","description":"USN-4316-1 fixed a vulnerability in GD Graphics Library. This update provides\nthe corresponding update for Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\nIt was discovered that GD Graphics Library incorrectly handled cloning an\nimage. An attacker could possibly use this issue to cause GD Graphics Library\nto crash, resulting in a denial of service. (CVE-2018-14553)\n\nIt was discovered that GD Graphics Library incorrectly handled loading images\nfrom X bitmap format files. An attacker could possibly use this issue to cause\nGD Graphics Library to crash, resulting in a denial of service, or to disclose\ncontents of the stack that has been left there by previous code. (CVE-2019-11038)\n","status":"published","published":"2020-04-02T22:14:49Z","modified":"2026-04-27T15:48:48.722455208Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}