libgd CVE-2017-6362 Double Free Denial of Service Vulnerability

Bugtraq ID:	100836
Class:	Design Error
CVE:	CVE-2017-6362
Remote:	Yes
Local:	No
Published:	Feb 14 2017 12:00AM
Updated:	Feb 14 2017 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	LibGD LibGD 2.2.4 LibGD LibGD 2.2.3 LibGD LibGD 2.2.1 LibGD LibGD 2.2.0 LibGD LibGD 2.1.1 LibGD LibGD 2.1.0
Not Vulnerable:	LibGD LibGD 2.2.5

libgd CVE-2017-6362 Double Free Denial of Service Vulnerability

libgd is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to cause a denial-of-service condition.

Versions prior to libgd 2.2.5 are vulnerable.

libgd CVE-2017-6362 Double Free Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

libgd CVE-2017-6362 Double Free Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

libgd CVE-2017-6362 Double Free Denial of Service Vulnerability

References:

• Fix #381: libgd double-free vulnerability (libgd)
  
• libgd double-free vulnerability #381 (libgd)
  
• LibGD Homepage (LibGD)