{"id":"CVE-2019-6977","aliases":["ALPINE-CVE-2019-6977","ALSA-2020:4659","BELL-CVE-2019-6977","CLSA-2026-1777946242","DEBIAN-CVE-2019-6977","DLA-1651-1","DLA-1679-1","DSA-4384-1","EUVD-2019-16529","GHSA-3jrx-xgc5-h2f9","MGASA-2019-0073","RHSA-2019:2519","RHSA-2019:3299","RHSA-2020:4659","RLSA-2020:4659","SUSE-SU-2019:0333-1","SUSE-SU-2019:0449-1","SUSE-SU-2019:0747-1","SUSE-SU-2019:0771-1","SUSE-SU-2019:13961-1","UBUNTU-CVE-2019-6977","USN-3900-1","openSUSE-SU-2019:1148-1","openSUSE-SU-2024:10777-1","openSUSE-SU-2024:11852-1"],"status":"published","title":"gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in...","description":"gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.71496,"percentile":0.99419,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-787"],"published":"2019-01-26T00:00:00Z","modified":"2026-11-03T06:32:19Z","exploits":[{"source":"exploitdb","id":"EDB-46677","title":"PHP 7.2 - 'imagecolormatch()' Out of Band Heap Write","type":"remote","platform":"php","date":"2019-02-27","url":"https://www.exploit-db.com/exploits/46677"},{"source":"pocgithub","id":"HORKimhab/CVE-2022-31626-CVE-2024-2961-CVE-2019-6977","title":"HORKimhab/CVE-2022-31626-CVE-2024-2961-CVE-2019-6977","date":"2026-08-06","url":"https://github.com/HORKimhab/CVE-2022-31626-CVE-2024-2961-CVE-2019-6977"}],"fixes":[{"ecosystem":"Alpine:v3.10","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"gd","fixed_in":["2.2.5-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"php7","fixed_in":["7.1.29-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libgd2","fixed_in":["2.2.5-5.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libgd2","fixed_in":["2.2.5-5.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libgd2","fixed_in":["2.2.5-5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","fixed_in":["5.5.14-109.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php5","fixed_in":["5.5.14-109.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"php5","fixed_in":["5.5.14-109.48.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libgd2","fixed_in":["2.1.0-3ubuntu0.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libgd2","fixed_in":["2.1.1-4ubuntu0.16.04.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libgd2","fixed_in":["2.2.5-4ubuntu0.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"perl-GD","fixed_in":["2.76-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.29-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-zts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els20"}]}],"bundled":13},{"source":"osv","ecosystem":"Debian:12","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-5.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-5.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-5.1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-5+deb8u12"}]}],"versions":["2.1.0-5","2.1.0-5+deb8u1","2.1.0-5+deb8u10","2.1.0-5+deb8u11","2.1.0-5+deb8u2","2.1.0-5+deb8u3","2.1.0-5+deb8u4","2.1.0-5+deb8u5","2.1.0-5+deb8u6","2.1.0-5+deb8u7","2.1.0-5+deb8u8","2.1.0-5+deb8u9"],"bundled":4},{"source":"osv","ecosystem":"Debian:8","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.40+dfsg-0+deb8u1"}]}],"versions":["5.6.11+dfsg-1","5.6.12+dfsg-0+deb8u1","5.6.12+dfsg-1","5.6.13+dfsg-0+deb8u1","5.6.13+dfsg-1","5.6.13+dfsg-2","5.6.14+dfsg-0+deb8u1","5.6.14+dfsg-1","5.6.15+dfsg-1","5.6.16+dfsg-1","5.6.16+dfsg-2","5.6.16+dfsg-3","5.6.16+dfsg-4","5.6.17+dfsg-0+deb8u1","5.6.17+dfsg-1","5.6.17+dfsg-3","5.6.18+dfsg-1","5.6.19+dfsg-0+deb8u1","5.6.19+dfsg-1","5.6.19+dfsg-2","5.6.20+dfsg-0+deb8u1","5.6.20+dfsg-1","5.6.21+dfsg-1","5.6.21+dfsg-2","5.6.22+dfsg-0+deb8u1","5.6.22+dfsg-1","5.6.22+dfsg-2","5.6.23+dfsg-0+deb8u1","5.6.23+dfsg-1","5.6.24+dfsg-0+deb8u1","5.6.24+dfsg-1","5.6.26+dfsg-0+deb8u1","5.6.26+dfsg-1","5.6.27+dfsg-0+deb8u1","5.6.28+dfsg-0+deb8u1","5.6.29+dfsg-0+deb8u1","5.6.30+dfsg-0+deb8u1","5.6.33+dfsg-0+deb8u1","5.6.36+dfsg-0+deb8u1","5.6.37+dfsg-0+deb8u1","5.6.38+dfsg-0+deb8u1","5.6.39+dfsg-0+deb8u1","5.6.39+dfsg-0+deb8u2","5.6.7+dfsg-1","5.6.9+dfsg-0+deb8u1","5.6.9+dfsg-1"],"bundled":5},{"source":"osv","ecosystem":"Debian:9","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-2+deb9u4"}]}],"versions":["2.2.4-2","2.2.4-2+deb9u1","2.2.4-2+deb9u2","2.2.4-2+deb9u3"],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"libgd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-2.3.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php71-php-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.30-1.el7"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php72-php-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.24-1.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gd-progs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.63.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.63.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.63.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-24.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.53.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.53.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.53.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.11"}]}],"versions":["2.1.0-2","2.1.0-3","2.1.0-3ubuntu0.1","2.1.0-3ubuntu0.2","2.1.0-3ubuntu0.3","2.1.0-3ubuntu0.5","2.1.0-3ubuntu0.6","2.1.0-3ubuntu0.7","2.1.0-3ubuntu0.8","2.1.0-3ubuntu0.10"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.11"}]}],"versions":["2.1.1-4build1","2.1.1-4build2","2.1.1-4ubuntu0.16.04.1","2.1.1-4ubuntu0.16.04.2","2.1.1-4ubuntu0.16.04.3","2.1.1-4ubuntu0.16.04.5","2.1.1-4ubuntu0.16.04.6","2.1.1-4ubuntu0.16.04.7","2.1.1-4ubuntu0.16.04.8","2.1.1-4ubuntu0.16.04.10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4ubuntu0.3"}]}],"versions":["2.2.5-3","2.2.5-4","2.2.5-4ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.11"}]}],"versions":["2.1.0-2","2.1.0-3","2.1.0-3ubuntu0.1","2.1.0-3ubuntu0.2","2.1.0-3ubuntu0.3","2.1.0-3ubuntu0.5","2.1.0-3ubuntu0.6","2.1.0-3ubuntu0.7","2.1.0-3ubuntu0.8","2.1.0-3ubuntu0.10"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.11"}]}],"versions":["2.1.1-4build1","2.1.1-4build2","2.1.1-4ubuntu0.16.04.1","2.1.1-4ubuntu0.16.04.2","2.1.1-4ubuntu0.16.04.3","2.1.1-4ubuntu0.16.04.5","2.1.1-4ubuntu0.16.04.6","2.1.1-4ubuntu0.16.04.7","2.1.1-4ubuntu0.16.04.8","2.1.1-4ubuntu0.16.04.10"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-4ubuntu0.3"}]}],"versions":["2.2.5-3","2.2.5-4","2.2.5-4ubuntu0.2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.5-lp150.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-1.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"perl-GD","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76-1.1"}]}]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"libgd","product":"libgd"},{"vendor":"netapp","product":"storage_automation_store"},{"vendor":"php","product":"php"}],"references":[{"url":"http://www.securityfocus.com/bid/106731","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190315-0003/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"http://php.net/ChangeLog-5.php","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"http://php.net/ChangeLog-7.php","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://usn.ubuntu.com/3900-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/01/msg00028.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://bugs.php.net/bug.php?id=77270","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Mailing List","Vendor Advisory","report"]},{"url":"https://www.debian.org/security/2019/dsa-4384","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/201903-18","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00025.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00031.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://www.exploit-db.com/exploits/46677/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","web"]},{"url":"http://packetstormsecurity.com/files/152459/PHP-7.2-imagecolormatch-Out-Of-Band-Heap-Write.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2519","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3299","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEYUUOW75YD3DENIPYMO263E6NL2NFHI/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3WRUPZVT2MWFUEMVGTRAGDOBHLNMGK5R/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TTXSLRZI5BCQT3H5KALG3DHUWUMNPDX2/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6977","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WRUPZVT2MWFUEMVGTRAGDOBHLNMGK5R/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TEYUUOW75YD3DENIPYMO263E6NL2NFHI/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TTXSLRZI5BCQT3H5KALG3DHUWUMNPDX2/"},{"url":"https://github.com/advisories/GHSA-3jrx-xgc5-h2f9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-6977","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-4659.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2018-14553","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-6977","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-6978","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-6977","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1777946242.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-6977","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0073.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24336","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1484837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1551039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1563858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1629552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1680545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724154","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2519.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10166","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9118","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9118","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9118","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9120","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9120","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9120","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12932","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12932","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-16642","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-16642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16642","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5711","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5711","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5712","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7584","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10545","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10545","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10546","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10546","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10547","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10548","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10548","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10549","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10549","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14851","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14851","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14851","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14884","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17082","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17082","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17082","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20783","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20783","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-6977","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-6977","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9020","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9020","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9020","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9021","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9021","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9022","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9022","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9023","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9023","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9024","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9024","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9024","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9637","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9637","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9638","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9640","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11034","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11034","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11034","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11035","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11035","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11035","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11036","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11036","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11036","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11038","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11038","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11038","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11039","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11040","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1766378","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3299.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11043","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11043","tags":["advisory"]},{"url":"https://www.nginx.com/blog/php-fpm-cve-2019-11043-vulnerability-nginx/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4659","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671390","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4659.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14553","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14553","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14553","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-6978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-6978","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6978","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:4659","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190333-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1118832","tags":["report"]},{"url":"https://bugzilla.suse.com/1123354","tags":["report"]},{"url":"https://bugzilla.suse.com/1123522","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6978","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190449-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190747-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1123361","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190771-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201913961-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-6977","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3900-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-6978","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BTHBKC7A4BRQZVCDIQQU2NJC4NYEFV5X/#BTHBKC7A4BRQZVCDIQQU2NJC4NYEFV5X","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11038","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-6977","description":"gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.","status":"published","published":"2019-01-27T02:00:00Z","modified":"2024-08-04T20:38:32.847Z","updated_at":"2026-11-02T14:20:23.381621Z"}],"euvd":[{"id":"EUVD-2019-16529","description":"gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.","status":"published","published":"2019-01-27T02:00:00Z","modified":"2024-08-04T20:38:32Z","updated_at":"2026-11-03T03:06:47.494697Z"}],"ghsa":[{"id":"GHSA-3jrx-xgc5-h2f9","title":"gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in...","description":"gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.","status":"published","published":"2022-05-13T01:22:47Z","modified":"2023-02-01T05:07:12Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:50:30.001937Z"}],"nvd":[{"id":"CVE-2019-6977","description":"gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.","status":"published","published":"2019-01-27T02:29:00.34Z","modified":"2026-06-17T02:39:51.67Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:05:02.989216Z"}],"osv":[{"id":"ALPINE-CVE-2019-6977","description":"gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.","status":"published","published":"2019-01-27T02:29:00.34Z","modified":"2026-11-03T06:32:19.074292726Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"BELL-CVE-2019-6977","title":"CVE-2019-6977 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:08.403094Z","modified":"2026-09-06T07:15:10.344531955Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-6977","description":"gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.","status":"published","published":"2019-01-27T02:29:00.34Z","modified":"2026-10-24T10:30:33.083642163Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:12.675558Z"},{"id":"DEBIAN-CVE-2019-6977","description":"gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.","status":"published","published":"2019-01-27T02:29:00.34Z","modified":"2026-09-21T07:02:59.028442764Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.57265Z"},{"id":"RHSA-2019:2519","title":"Red Hat Security Advisory: rh-php71-php security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:00:42Z","modified":"2026-06-29T10:26:05Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3299","title":"Red Hat Security Advisory: rh-php72-php security update","status":"published","published":"2024-09-13T22:02:04Z","modified":"2026-06-29T10:27:17Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2020:4659","title":"Red Hat Security Advisory: gd security update","status":"published","published":"2024-09-16T04:05:10Z","modified":"2026-06-29T10:32:39Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RLSA-2020:4659","title":"Moderate: gd security update","description":"GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. \n\nSecurity Fix(es):\n\n* gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)\n\n* gd: NULL pointer dereference in gdImageClone (CVE-2018-14553)\n\n* gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:24:40Z","modified":"2026-02-05T14:00:10.843328Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-6977","description":"gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.","status":"published","published":"2019-01-26T00:00:00Z","modified":"2026-04-22T12:20:49.948947Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:21.741399Z"},{"id":"ALSA-2020:4659","title":"Moderate: gd security update","description":"GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. \n\nSecurity Fix(es):\n\n* gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)\n\n* gd: NULL pointer dereference in gdImageClone (CVE-2018-14553)\n\n* gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:24:40Z","modified":"2026-10-29T11:00:14.499935688Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2026-1777946242","title":"php: Fix of 13 CVEs","description":"- CVE-2018-14883: fix int overflow leading to heap overflow in exif_thumbnail_extract\n- CVE-2019-6977: fix imagecolormatch out-of-bounds write on heap in GD\n- CVE-2019-9022: fix memcpy with negative length via crafted DNS response\n- CVE-2019-9640: fix invalid read in exif_process_SOFn\n- CVE-2019-11042: fix heap buffer overflow in exif_process_user_comment\n- CVE-2019-9638, CVE-2019-9639: fix uninitialized read in\n  exif_process_IFD_in_MAKERNOTE (single upstream commit covers both)\n- CVE-2019-9637: safer rename() procedure to avoid permission leak on EXDEV\n  cross-filesystem fallback\n- CVE-2019-19246: fix Oniguruma out-of-bounds read in str_lower_case_match\n- CVE-2019-9024: fix xmlrpc base64 out-of-bounds read via unsigned char cast\n- CVE-2018-20783: fix phar_parse_pharfile buffer over-read via stricter\n  manifest bounds checks\n- CVE-2018-19518: disable rsh/ssh logins in imap_open by default\n  (new no_rsh/no_ssh INI entries)\n- CVE-2018-19935: fix imap_mail NULL pointer dereference on empty message\n  parameter","status":"published","published":"2026-05-05T01:57:28Z","modified":"2026-10-21T10:48:18.027864739Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"DLA-1651-1","title":"libgd2 - security update","status":"published","published":"2019-01-30T00:00:00Z","modified":"2026-03-09T01:20:06.623659Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-1679-1","title":"php5 - security update","status":"published","published":"2019-02-16T00:00:00Z","modified":"2026-03-09T01:22:44.980254Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4384-1","title":"libgd2 - security update","status":"published","published":"2019-02-04T00:00:00Z","modified":"2026-03-09T02:10:45.323628Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0073","title":"Updated libgd packages fix security vulnerability","description":"gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka\nLibGD) 2.2.5 has a heap-based buffer overflow. This can be exploited by an\nattacker who is able to trigger calls to the function with crafted image\ndata (CVE-2019-6977).\n\nThe GD Graphics Library (aka LibGD) 2.2.5 has a double free in the\ngdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c\n(CVE-2019-6978).\n","status":"published","published":"2019-02-13T11:08:25Z","modified":"2026-04-16T04:41:56.298616364Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:1148-1","title":"Security update for gd","description":"This update for gd fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123361).\n- CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-04-04T14:15:28Z","modified":"2026-02-04T03:03:30.272171Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:10777-1","title":"gd-2.3.3-1.1 on GA media","description":"These are all security issues fixed in the gd-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:16:49.11313Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11852-1","title":"perl-GD-2.76-1.1 on GA media","description":"These are all security issues fixed in the perl-GD-2.76-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:43:38.476366Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2019:0333-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123354).\n- CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522).\n- CVE-2018-19935: Fixed a Denial of Service in php_imap.c which could be triggered via an empty string in the message argument to imap_mail (bsc#1118832).\n","status":"published","published":"2019-02-12T11:55:36Z","modified":"2026-02-04T03:08:01.217109Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0449-1","title":"Security update for php5","description":"This update for php5 fixes the following issues:\n\nSecurity vulnerability fixed:\n\n- CVE-2019-6977: Fixed a heap buffer overflow in gdImageColorMatch in\n  gd_color_match.c (bsc#1123354)\n","status":"published","published":"2019-02-20T13:40:10Z","modified":"2026-02-04T02:26:14.969252Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0747-1","title":"Security update for gd","description":"This update for gd fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123361).\n- CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522).\n","status":"published","published":"2019-03-26T13:35:32Z","modified":"2026-02-04T03:50:01.590272Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0771-1","title":"Security update for gd","description":"This update for gd fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123361).\n- CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522).\n","status":"published","published":"2019-03-27T09:36:11Z","modified":"2026-02-04T03:59:04.047137Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:13961-1","title":"Security update for php53","description":"This update for php53 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123354).\n- CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522).\n","status":"published","published":"2019-02-14T16:25:47Z","modified":"2026-02-04T04:07:44.05602Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"USN-3900-1","title":"libgd2 vulnerabilities","description":"It was discovered that GD incorrectly handled memory when processing\ncertain images. A remote attacker could use this issue with a specially\ncrafted image file to cause GD to crash, resulting in a denial of service,\nor possibly execute arbitrary code.\n","status":"published","published":"2019-02-28T14:08:30Z","modified":"2026-04-22T09:53:33.003078Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}