{"id":"CVE-2018-15879","aliases":["EUVD-2018-7736","GHSA-m7cw-rc6c-rqhq","UBUNTU-CVE-2018-15879"],"status":"rejected","title":"The GD Graphics Library (aka libgd) through 2.2.5 has a Double Free Vulnerability in the...","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation duplicate of CVE-2019-6978. Notes: All CVE users should reference CVE-2019-6978 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2019-06-20T18:11:28Z","modified":"2026-04-22T11:46:12Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"libgd2","fixed_in":["2.1.0-3ubuntu0.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libgd2","fixed_in":["2.1.1-4ubuntu0.16.04.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libgd2","fixed_in":["2.2.5-4ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.10"}]}],"versions":["2.1.0-2","2.1.0-3","2.1.0-3ubuntu0.1","2.1.0-3ubuntu0.2","2.1.0-3ubuntu0.3","2.1.0-3ubuntu0.5","2.1.0-3ubuntu0.6","2.1.0-3ubuntu0.7","2.1.0-3ubuntu0.8"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.10"}]}],"versions":["2.1.1-4build1","2.1.1-4build2","2.1.1-4ubuntu0.16.04.1","2.1.1-4ubuntu0.16.04.2","2.1.1-4ubuntu0.16.04.3","2.1.1-4ubuntu0.16.04.5","2.1.1-4ubuntu0.16.04.6","2.1.1-4ubuntu0.16.04.7","2.1.1-4ubuntu0.16.04.8"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4ubuntu0.2"}]}],"versions":["2.2.5-3","2.2.5-4"]}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-15879"},{"url":"https://github.com/libgd/libgd/issues/447"},{"url":"https://github.com/advisories/GHSA-m7cw-rc6c-rqhq"},{"url":"https://ubuntu.com/security/CVE-2018-15879","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-15879","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-15879","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation duplicate of CVE-2019-6978. Notes: All CVE users should reference CVE-2019-6978 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2019-06-20T18:11:28Z","modified":"2019-06-24T17:05:39Z","updated_at":"2026-11-02T14:35:03.825765Z"}],"euvd":[{"id":"EUVD-2018-7736","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation duplicate of CVE-2019-6978. Notes: All CVE users should reference CVE-2019-6978 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2019-06-20T18:11:28Z","modified":"2019-06-24T17:05:39Z","updated_at":"2026-11-03T03:51:29.418182Z"}],"ghsa":[{"id":"GHSA-m7cw-rc6c-rqhq","title":"The GD Graphics Library (aka libgd) through 2.2.5 has a Double Free Vulnerability in the...","description":"The GD Graphics Library (aka libgd) through 2.2.5 has a Double Free Vulnerability in the gdImageBmpPt function.","status":"published","published":"2022-05-24T16:48:32Z","modified":"2023-01-28T05:05:57Z","updated_at":"2026-11-02T14:44:23.373796Z"}],"nvd":[{"id":"CVE-2018-15879","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation duplicate of CVE-2019-6978. Notes: All CVE users should reference CVE-2019-6978 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2019-06-20T19:15:09.793Z","modified":"2023-11-07T02:53:25.17Z","updated_at":"2026-11-02T14:04:57.307075Z"}],"osv":[{"id":"UBUNTU-CVE-2018-15879","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation duplicate of CVE-2019-6978. Notes: All CVE users should reference CVE-2019-6978 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2019-06-20T19:15:00Z","modified":"2026-04-22T11:46:12.360084Z","updated_at":"2026-11-02T15:54:17.014176Z"}]}}
