CVE-2019-6978

Public on 2019-01-28
Modified on 2020-10-22
Description
The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected.
Severity
Low severity
Low
See what this means
CVSS v3 Base Score
5.3
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 1 libwmf 2019-03-21 ALAS-2019-1174 Fixed
Amazon Linux 2 - Core libwmf 2019-03-07 ALAS2-2019-1174 Fixed

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2019-6978 Mitre: CVE-2019-6978