Published: 19/06/2019 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

It exists that GD Graphics Library incorrectly handled cloning an image. An attacker could possibly use this issue to cause GD Graphics Library to crash, resulting in a denial of service. (CVE-2018-14553)

Vulnerable Product	Search on Vulmon	Subscribe to Product
libgd libgd 2.2.5
php php
canonical ubuntu linux 16.04
canonical ubuntu linux 18.04
canonical ubuntu linux 14.04
canonical ubuntu linux 19.10
debian debian linux 8.0
debian debian linux 9.0
fedoraproject fedora 29
fedoraproject fedora 30
fedoraproject fedora 32
suse linux enterprise debuginfo 11
suse linux enterprise desktop 12
opensuse leap 15.1
suse linux enterprise software development kit 12
suse linux enterprise server 12
suse linux enterprise workstation extension 12
redhat enterprise linux 7.0
redhat software collections 1.0
redhat enterprise linux 8.0

Debian Bug report logs - #929821 libgd2: CVE-2019-11038: Uninitialized read in gdImageCreateFromXbm Package: src:libgd2; Maintainer for src:libgd2 is GD Team <team+gd@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 31 May 2019 20:45:01 UTC Severity: important Tags: security, upst ...

Synopsis Moderate: rh-php71-php security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for rh-php71-php is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerabilit ...

Synopsis Critical: rh-php72-php security update Type/Severity Security Advisory: Critical Topic An update for rh-php72-php is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Critical A Common Vulnerability Scoring System (CVSS) ba ...

Several security issues were fixed in GD Graphics Library ...

Multiple security issues were found in PHP, a widely-used open source general purpose scripting language: Missing sanitising in the EXIF extension and the iconv_mime_decode_headers() function could result in information disclosure or denial of service For the oldstable distribution (stretch), these problems have been fixed in version 7033-0+deb9 ...

Function iconv_mime_decode_headers() in PHP may perform out-of-buffer read due to integer overflow when parsing MIME headers This may lead to information disclosure or crash(CVE-2019-11039) When using gdImageCreateFromXbm() function of PHP gd extension, it is possible to supply data that will cause the function to use the value of uninitialized v ...

Impact: Moderate Public Date: 2019-06-18 CWE: CWE-200 Bugzilla: 1724149: CVE-2019-11038 php: informatio ...

CWE-908 https://bugs.php.net/bug.php?id=77973 https://lists.debian.org/debian-lts-announce/2019/06/msg00003.html https://bugzilla.redhat.com/show_bug.cgi?id=1724149 https://bugzilla.suse.com/show_bug.cgi?id=1140120 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821 https://github.com/libgd/libgd/issues/501 https://bugzilla.redhat.com/show_bug.cgi?id=1724432 https://bugzilla.suse.com/show_bug.cgi?id=1140118 https://access.redhat.com/errata/RHSA-2019:2519 https://seclists.org/bugtraq/2019/Sep/38 https://www.debian.org/security/2019/dsa-4529 https://access.redhat.com/errata/RHSA-2019:3299 http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00020.html https://usn.ubuntu.com/4316-2/https://usn.ubuntu.com/4316-1/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PKSSWFR2WPMUOIB5EN5ZM252NNEPYUTG/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WAZBVK6XNYEIN7RDQXESSD63QHXPLKWL/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929821 https://nvd.nist.gov https://usn.ubuntu.com/4316-1/

CVE-2019-11038

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect