Lucene search
Cloud FoundryCFOUNDRY:40745D5FA6FB6276F6E55A49C5D3AB21HistorySep 21, 2017 - 12:00 a.m.
USN-3410-1: GD library vulnerability | Cloud Foundry
2017-09-2100:00:00
Cloud Foundry
www.cloudfoundry.org
18
0.008 Low
EPSS
Percentile
82.2%
Severity
Medium
Vendor
Canonical Ubuntu
Versions Affected
- Canonical Ubuntu 14.04
Description
It was discovered that the GD Graphics Library (aka libgd) incorrectly handled certain malformed PNG images. A remote attacker could use this issue to cause the GD Graphics Library to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Cloud Foundry Products and Versions
Severity is medium unless otherwise noted.
- All versions of Cloud Foundry cflinuxfs2 prior to 1.154.0
Mitigation
OSS users are strongly encouraged to follow one of the mitigations below:
- The Cloud Foundry project recommends that Cloud Foundry deployments run with cflinuxfs2 version 1.154.0 or later.
References
Related
nessus
nessus
Fedora 25 : libwmf (2017-d361de1a65)
2017-09-21 00:00:00
SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2018:0135-1)
2018-01-19 00:00:00
openSUSE Security Update : gd (openSUSE-2018-63)
2018-01-22 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: libwmf-0.2.8.4-53.fc25
2017-09-20 19:50:41
[SECURITY] Fedora 27 Update: libwmf-0.2.8.4-53.fc27
2017-10-04 14:25:27
[SECURITY] Fedora 27 Update: libwmf-0.2.8.4-53.fc27
2017-10-04 20:38:49
debian
debian
[SECURITY] [DSA 3961-1] libgd2 security update
2017-09-03 06:01:38
[SECURITY] [DSA 3961-1] libgd2 security update
2017-09-03 06:01:38
[SECURITY] [DLA 1106-1] libgd2 security update
2017-09-22 16:26:23
cve
cve
CVE-2017-6362
2017-09-07 13:29:00
osv
osv
libgd2 - security update
2017-09-03 00:00:00
libgd2 - security update
2017-09-22 00:00:00
CVE-2017-6362
2017-09-07 13:29:00
openvas
openvas
Debian: Security Advisory (DSA-3961-1)
2017-09-02 00:00:00
Ubuntu: Security Advisory (USN-3410-2)
2022-08-26 00:00:00
Fedora Update for libwmf FEDORA-2017-c98c2e8e7a
2017-09-14 00:00:00
ubuntu
ubuntu
GD library vulnerability
2017-09-05 00:00:00
GD library vulnerability
2017-09-05 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-05-10 23:26:16
freebsd
freebsd
libgd -- Denial of servica via double free
2017-09-07 00:00:00
cvelist
cvelist
CVE-2017-6362
2017-09-07 13:00:00
nvd
nvd
CVE-2017-6362
2017-09-07 13:29:00
debiancve
debiancve
CVE-2017-6362
2017-09-07 13:29:00
redhatcve
redhatcve
CVE-2017-6362
2017-09-08 13:30:17
mageia
mageia
Updated libwmf packages fix security vulnerability
2017-09-21 16:43:32
Updated libgd packages fix security vulnerability
2017-10-05 23:08:40
ubuntucve
ubuntucve
CVE-2017-6362
2017-09-01 00:00:00
alpinelinux
alpinelinux
CVE-2017-6362
2017-09-07 13:29:00
prion
prion
Double free
2017-09-07 13:29:00
slackware
slackware
[slackware-security] gd
2018-04-19 01:44:39
[slackware-security] libwmf
2018-05-01 01:19:49