Published: 27/01/2019 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP prior to 5.6.40, 7.x prior to 7.1.26, 7.2.x prior to 7.2.14, and 7.3.x prior to 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libgd libgd 2.2.5
php php 7.3.0
php php
debian debian linux 8.0
debian debian linux 9.0
canonical ubuntu linux 16.04
canonical ubuntu linux 14.04
canonical ubuntu linux 18.04
canonical ubuntu linux 18.10
netapp storage automation store

Several security issues were fixed in GD ...

Synopsis Moderate: rh-php71-php security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for rh-php71-php is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerabilit ...

Synopsis Moderate: gd security update Type/Severity Security Advisory: Moderate Topic An update for gd is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which gives ...

Synopsis Critical: rh-php72-php security update Type/Severity Security Advisory: Critical Topic An update for rh-php72-php is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Critical A Common Vulnerability Scoring System (CVSS) ba ...

Debian Bug report logs - #920645 libgd2: CVE-2019-6977 Package: src:libgd2; Maintainer for src:libgd2 is GD Team <team+gd@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 27 Jan 2019 20:15:01 UTC Severity: grave Tags: patch, security, upstream Found in versions libgd2/224-2, li ...

Debian Bug report logs - #920728 libgd2: CVE-2019-6978 Package: src:libgd2; Maintainer for src:libgd2 is GD Team <team+gd@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 28 Jan 2019 15:51:02 UTC Severity: grave Tags: fixed-upstream, patch, security, upstream Found in versions li ...

gdImageColorMatch in gd_color_matchc in the GD Graphics Library (aka LibGD) 225, as used in the imagecolormatch function in PHP before 5640, 7x before 7126, 72x before 7214, and 73x before 731, has a heap-based buffer overflow This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data ...

<?php # imagecolormatch() OOB Heap Write exploit # bugsphpnet/bugphp?id=77270 # CVE-2019-6977 # Charles Fol # @cfreal_ # # Usage: GET/POST /exploitphp?f=<system_addr>&c=<command> # Example: GET/POST /exploitphp?f=0x7fe83d1bb480&c=id+>+/dev/shm/titi # # Target: PHP 72x # Tested on: PHP 7212 # /* buf = (un ...

PHP version 72 suffers from an imagecolormatch() out-of-band heap write vulnerability ...

CWE-787 https://bugs.php.net/bug.php?id=77270 http://php.net/ChangeLog-7.php http://php.net/ChangeLog-5.php http://www.securityfocus.com/bid/106731 https://lists.debian.org/debian-lts-announce/2019/01/msg00028.html https://www.debian.org/security/2019/dsa-4384 https://usn.ubuntu.com/3900-1/https://security.netapp.com/advisory/ntap-20190315-0003/https://security.gentoo.org/glsa/201903-18 http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00025.html http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00031.html http://packetstormsecurity.com/files/152459/PHP-7.2-imagecolormatch-Out-Of-Band-Heap-Write.html https://www.exploit-db.com/exploits/46677/https://access.redhat.com/errata/RHSA-2019:2519 https://access.redhat.com/errata/RHSA-2019:3299 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEYUUOW75YD3DENIPYMO263E6NL2NFHI/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3WRUPZVT2MWFUEMVGTRAGDOBHLNMGK5R/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TTXSLRZI5BCQT3H5KALG3DHUWUMNPDX2/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/https://usn.ubuntu.com/3900-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/46677

CVE-2019-6977

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect