DSA-3938-1 libgd2 -- libgd2ID: oval:org.secpod.oval:def:603044 | Date: (C)2017-09-05 (M)2024-02-19 |
Class: PATCH | Family: unix |
Matviy Kotoniy reported that the gdImageCreateFromGifCtx function used to load images from GIF format files in libgd2, a library for programmatic graphics creation and manipulation, does not zero stack allocated color map buffers before their use, which may result in information disclosure if a specially crafted file is processed.
Platform: |
Debian 8.x |
Debian 9.x |
Product: |
libgd3 |
libgd2-xpm-dev |
libgd2-noxpm-dev |
libgd-tools |
libgd-dev |