VDB

CVE-2017-6363

CVE-2017-6363 PUBLISHED CVSS 8.100000381469727 HIGH

In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor says "In my opinion this issue should not have a CVE, since the GD and GD2 formats are documented to be 'obsolete, and should only be used for development and testing purposes.'

EPSS 1.40% · 72.2th percentile

Risk Scores

CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
EPSS Score
1.40%
72.2th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSlibgd22.2.5-5.2ubuntu2, 0, 2.2.5-5.2
Ubuntu:18.04:LTSlibgd22.2.5-4ubuntu0.3, 2.2.5-4ubuntu0.4, 2.2.5-3
Ubuntu:Pro:14.04:LTSlibgd22.1.0-3ubuntu0.11, 2.1.0-3ubuntu0.11+esm1, 2.1.0-3ubuntu0.1
Ubuntu:Pro:16.04:LTSlibgd20, 2.1.1-4build2, 2.1.1-4ubuntu0.16.04.2

Timeline

  • Feb 27, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 26, 2021 EPSS Score
  • Oct 28, 2021 EPSS Score
  • Mar 3, 2022 EPSS Score
  • May 6, 2022 EPSS Score
  • Jul 8, 2022 EPSS Score
  • Sep 10, 2022 EPSS Score
  • Nov 12, 2022 EPSS Score
  • Jan 15, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›