Lucene search

Veracode Vulnerability DatabaseVERACODE:19319

HistoryMay 16, 2019 - 3:00 a.m.

Denial Of Service (DoS) Through Infinite Loop

2019-05-1603:00:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

62.0%

JSON

PHP is vulnerable to denial-of-service attacks. A remote unauthenticated attacker could cause denial of Service via infinite loop in imagecreatefromgif/imagecreatefromstring function in ext/gd/libgd/gd_gif_in.c. The affected component is GD Graphics Library

CPENameOperatorVersion
rh-php70-phpeq7.0.10__2.el7
rh-php70-phpeq7.0.10__2.el6
rh-php71-phpeq7.1.8__1.el7
php5:3.4eq5.6.31-r0

Name	Operator	Version
rh-php70-php	eq	7.0.10__2.el7
rh-php70-php	eq	7.0.10__2.el6
rh-php71-php	eq	7.1.8__1.el7
php5:3.4	eq	5.6.31-r0

References

php.net/ChangeLog-5.php

php.net/ChangeLog-7.php

access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.1_release_notes/chap-rhscl#sect-RHSCL-Changes-php

access.redhat.com/errata/RHSA-2018:1296

access.redhat.com/errata/RHSA-2019:2519

access.redhat.com/security/updates/classification/#moderate

bugs.php.net/bug.php?id=75571

lists.debian.org/debian-lts-announce/2018/01/msg00022.html

lists.debian.org/debian-lts-announce/2019/01/msg00028.html

security.gentoo.org/glsa/201903-18

usn.ubuntu.com/3755-1/

0.002 Low

EPSS

Percentile

62.0%

JSON

Related for VERACODE:19319