php-gd 'gdxpm.c' NULL Pointer Dereference Denial of Service Vulnerability
BID:66233
Info
php-gd 'gdxpm.c' NULL Pointer Dereference Denial of Service Vulnerability
| Bugtraq ID: | 66233 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2014-2497 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 13 2014 12:00AM |
| Updated: | Jul 15 2015 12:13AM |
| Credit: | steventhomasseeley |
| Vulnerable: |
SuSE SUSE Linux Enterprise Server 10 SP3 LTSS Slackware Slackware Linux 13.37 Slackware Slackware Linux 13.1 Slackware Slackware Linux 13.0 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 6 Avaya Aura Session Manager 5.2 SP2 Avaya Aura Session Manager 5.2 SP1 Avaya Aura Session Manager 5.2 Avaya Aura Experience Portal 6.0 Avaya Aura Communication Manager Utility Services 6.2 Avaya Aura Communication Manager Utility Services 6.1 Avaya Aura Communication Manager Utility Services 6.0 |
| Not Vulnerable: | |
Discussion
php-gd 'gdxpm.c' NULL Pointer Dereference Denial of Service Vulnerability
php-gd is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to trigger a NULL-pointer dereference and cause an application crash, denying service to legitimate users.
php-gd 5.4.17-2 and prior versions are vulnerable.
php-gd is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to trigger a NULL-pointer dereference and cause an application crash, denying service to legitimate users.
php-gd 5.4.17-2 and prior versions are vulnerable.
Exploit / POC
php-gd 'gdxpm.c' NULL Pointer Dereference Denial of Service Vulnerability
Attackers can exploit this issue with readily available tools.
Attackers can exploit this issue with readily available tools.
Solution / Fix
php-gd 'gdxpm.c' NULL Pointer Dereference Denial of Service Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
php-gd 'gdxpm.c' NULL Pointer Dereference Denial of Service Vulnerability
References:
References:
- PHP Homepage (PHP)