{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:libgd:libgd:2.0.34:*:*:*:*:*:*:*",
              "matchCriteriaId": "D96EBE1F-7E30-43D5-8727-A9F96C9160E1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n gdPngReadData del libgd 2.0.34 permite a atacantes con la intervenci\u00f3n del usuario provocar una denegaci\u00f3n de servicio      (agotamiento de CPU) a trav\u00e9s de im\u00e1genes PNG modificadas con datos truncados, lo que provoca un bucle infinito en la funci\u00f3n png_read_info del libpng."
    }
  ],
  "id": "CVE-2007-2756",
  "lastModified": "2026-04-23T00:35:47.467",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2007-05-18T18:30:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://bugs.libgd.org/?do=details\u0026task_id=86"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/35788"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/36643"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://rhn.redhat.com/errata/RHSA-2007-0889.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25353"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25362"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25378"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25535"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25575"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25590"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25646"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25657"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25658"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25787"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25855"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26048"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26231"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26390"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26871"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26895"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26930"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26967"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27037"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27102"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27110"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/27545"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/29157"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/30168"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200708-05.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200711-34.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200805-13.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.482863"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.libgd.org/ReleaseNote020035"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:122"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:123"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:124"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:187"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2007_13_sr.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.020.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.php.net/releases/5_2_3.php"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0890.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0891.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0146.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/24089"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1018187"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.trustix.org/errata/2007/0019/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.trustix.org/errata/2007/0023/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/usn-473-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/1904"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/1905"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/2016"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/2336"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/3386"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34420"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://issues.rpath.com/browse/RPL-1394"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10779"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://bugs.libgd.org/?do=details\u0026task_id=86"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/35788"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/36643"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2007-0889.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25353"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25362"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25378"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25535"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25575"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25590"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25646"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25657"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25658"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25787"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25855"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26048"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26231"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26390"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26871"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26895"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26930"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26967"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27037"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27102"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27110"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/27545"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/29157"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/30168"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200708-05.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200711-34.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200805-13.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.482863"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.libgd.org/ReleaseNote020035"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:122"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:123"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:124"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:187"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2007_13_sr.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.020.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.php.net/releases/5_2_3.php"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0890.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0891.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0146.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/24089"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1018187"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.trustix.org/errata/2007/0019/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.trustix.org/errata/2007/0023/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/usn-473-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/1904"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/1905"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/2016"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/2336"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/3386"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34420"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://issues.rpath.com/browse/RPL-1394"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10779"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vendorComments": [
    {
      "comment": "Red Hat does not consider this flaw to be a security vulnerability.  We are not aware of any long running processes using libgd which could not recover from this condition.",
      "lastModified": "2007-05-22T00:00:00",
      "organization": "Red Hat"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2007-2756"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-05-18T18:30:00Z",
    "severity": "MODERATE"
  },
  "details": "The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.",
  "id": "GHSA-2rm4-pxv9-x75c",
  "modified": "2025-04-09T03:41:49Z",
  "published": "2022-05-01T18:06:53Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-2756"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34420"
    },
    {
      "type": "WEB",
      "url": "https://issues.rpath.com/browse/RPL-1394"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10779"
    },
    {
      "type": "WEB",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html"
    },
    {
      "type": "WEB",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html"
    },
    {
      "type": "WEB",
      "url": "http://bugs.libgd.org/?do=details\u0026task_id=86"
    },
    {
      "type": "WEB",
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/35788"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/36643"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2007-0889.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25353"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25362"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25378"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25535"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25575"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25590"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25646"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25657"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25658"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25787"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25855"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26048"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26231"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26390"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26871"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26895"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26930"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26967"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27037"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27102"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27110"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27545"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29157"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/30168"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200708-05.xml"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200711-34.xml"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200805-13.xml"
    },
    {
      "type": "WEB",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.482863"
    },
    {
      "type": "WEB",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.libgd.org/ReleaseNote020035"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:122"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:123"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:124"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:187"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2007_13_sr.html"
    },
    {
      "type": "WEB",
      "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.020.html"
    },
    {
      "type": "WEB",
      "url": "http://www.php.net/releases/5_2_3.php"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0890.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0891.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0146.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/24089"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1018187"
    },
    {
      "type": "WEB",
      "url": "http://www.trustix.org/errata/2007/0019"
    },
    {
      "type": "WEB",
      "url": "http://www.trustix.org/errata/2007/0023"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-473-1"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/1904"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/1905"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/2016"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/2336"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/3386"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2007-2756",
    "description": "The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.",
    "id": "GSD-2007-2756",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-2756.html",
      "https://access.redhat.com/errata/RHSA-2008:0146",
      "https://access.redhat.com/errata/RHSA-2007:0891",
      "https://access.redhat.com/errata/RHSA-2007:0890",
      "https://access.redhat.com/errata/RHSA-2007:0889",
      "https://security.archlinux.org/CVE-2007-2756",
      "https://alas.aws.amazon.com/cve/html/CVE-2007-2756.html",
      "https://linux.oracle.com/cve/CVE-2007-2756.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-2756"
      ],
      "details": "The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.",
      "id": "GSD-2007-2756",
      "modified": "2023-12-13T01:21:37.313477Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2007-2756",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "26231",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26231"
          },
          {
            "name": "36643",
            "refsource": "OSVDB",
            "url": "http://osvdb.org/36643"
          },
          {
            "name": "1018187",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1018187"
          },
          {
            "name": "29157",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29157"
          },
          {
            "name": "25658",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25658"
          },
          {
            "name": "27110",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27110"
          },
          {
            "name": "25590",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25590"
          },
          {
            "name": "26048",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26048"
          },
          {
            "name": "gd-gdpngreaddata-dos(34420)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34420"
          },
          {
            "name": "25362",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25362"
          },
          {
            "name": "OpenPKG-SA-2007.020",
            "refsource": "OPENPKG",
            "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.020.html"
          },
          {
            "name": "25657",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25657"
          },
          {
            "name": "FEDORA-2007-709",
            "refsource": "FEDORA",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html"
          },
          {
            "name": "25855",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25855"
          },
          {
            "name": "26967",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26967"
          },
          {
            "name": "MDKSA-2007:122",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:122"
          },
          {
            "name": "ADV-2007-2016",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/2016"
          },
          {
            "name": "GLSA-200805-13",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200805-13.xml"
          },
          {
            "name": "GLSA-200710-02",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml"
          },
          {
            "name": "MDKSA-2007:123",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:123"
          },
          {
            "name": "24089",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/24089"
          },
          {
            "name": "http://www.libgd.org/ReleaseNote020035",
            "refsource": "CONFIRM",
            "url": "http://www.libgd.org/ReleaseNote020035"
          },
          {
            "name": "GLSA-200708-05",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200708-05.xml"
          },
          {
            "name": "30168",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/30168"
          },
          {
            "name": "MDKSA-2007:124",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:124"
          },
          {
            "name": "ADV-2007-1904",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/1904"
          },
          {
            "name": "26930",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26930"
          },
          {
            "name": "35788",
            "refsource": "OSVDB",
            "url": "http://osvdb.org/35788"
          },
          {
            "name": "FEDORA-2007-2215",
            "refsource": "FEDORA",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html"
          },
          {
            "name": "ADV-2007-2336",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/2336"
          },
          {
            "name": "RHSA-2007:0889",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0889.html"
          },
          {
            "name": "2007-0023",
            "refsource": "TRUSTIX",
            "url": "http://www.trustix.org/errata/2007/0023/"
          },
          {
            "name": "25353",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25353"
          },
          {
            "name": "ADV-2007-3386",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/3386"
          },
          {
            "name": "http://bugs.libgd.org/?do=details\u0026task_id=86",
            "refsource": "CONFIRM",
            "url": "http://bugs.libgd.org/?do=details\u0026task_id=86"
          },
          {
            "name": "2007-0019",
            "refsource": "TRUSTIX",
            "url": "http://www.trustix.org/errata/2007/0019/"
          },
          {
            "name": "27037",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27037"
          },
          {
            "name": "SUSE-SR:2007:013",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2007_13_sr.html"
          },
          {
            "name": "25378",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25378"
          },
          {
            "name": "27545",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27545"
          },
          {
            "name": "GLSA-200711-34",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200711-34.xml"
          },
          {
            "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm",
            "refsource": "CONFIRM",
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm"
          },
          {
            "name": "SSA:2007-152-01",
            "refsource": "SLACKWARE",
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.482863"
          },
          {
            "name": "25646",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25646"
          },
          {
            "name": "RHSA-2008:0146",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0146.html"
          },
          {
            "name": "http://www.php.net/releases/5_2_3.php",
            "refsource": "CONFIRM",
            "url": "http://www.php.net/releases/5_2_3.php"
          },
          {
            "name": "SSRT071447",
            "refsource": "HP",
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
          },
          {
            "name": "https://issues.rpath.com/browse/RPL-1394",
            "refsource": "CONFIRM",
            "url": "https://issues.rpath.com/browse/RPL-1394"
          },
          {
            "name": "HPSBUX02262",
            "refsource": "HP",
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
          },
          {
            "name": "25535",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25535"
          },
          {
            "name": "MDKSA-2007:187",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:187"
          },
          {
            "name": "27102",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27102"
          },
          {
            "name": "oval:org.mitre.oval:def:10779",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10779"
          },
          {
            "name": "26895",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26895"
          },
          {
            "name": "25787",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25787"
          },
          {
            "name": "25575",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25575"
          },
          {
            "name": "RHSA-2007:0890",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0890.html"
          },
          {
            "name": "ADV-2007-1905",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/1905"
          },
          {
            "name": "26390",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26390"
          },
          {
            "name": "RHSA-2007:0891",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0891.html"
          },
          {
            "name": "USN-473-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/usn-473-1"
          },
          {
            "name": "26871",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26871"
          },
          {
            "name": "SUSE-SA:2007:044",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:libgd:libgd:2.0.34:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-2756"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugs.libgd.org/?do=details\u0026task_id=86",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "http://bugs.libgd.org/?do=details\u0026task_id=86"
            },
            {
              "name": "http://www.php.net/releases/5_2_3.php",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.php.net/releases/5_2_3.php"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1394",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://issues.rpath.com/browse/RPL-1394"
            },
            {
              "name": "http://www.libgd.org/ReleaseNote020035",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.libgd.org/ReleaseNote020035"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm"
            },
            {
              "name": "FEDORA-2007-709",
              "refsource": "FEDORA",
              "tags": [],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html"
            },
            {
              "name": "FEDORA-2007-2215",
              "refsource": "FEDORA",
              "tags": [],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html"
            },
            {
              "name": "GLSA-200708-05",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200708-05.xml"
            },
            {
              "name": "GLSA-200710-02",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml"
            },
            {
              "name": "GLSA-200711-34",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200711-34.xml"
            },
            {
              "name": "MDKSA-2007:123",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:123"
            },
            {
              "name": "MDKSA-2007:124",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:124"
            },
            {
              "name": "MDKSA-2007:122",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:122"
            },
            {
              "name": "MDKSA-2007:187",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:187"
            },
            {
              "name": "OpenPKG-SA-2007.020",
              "refsource": "OPENPKG",
              "tags": [],
              "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.020.html"
            },
            {
              "name": "RHSA-2007:0890",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0890.html"
            },
            {
              "name": "RHSA-2007:0889",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0889.html"
            },
            {
              "name": "RHSA-2007:0891",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0891.html"
            },
            {
              "name": "SSA:2007-152-01",
              "refsource": "SLACKWARE",
              "tags": [],
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.482863"
            },
            {
              "name": "SUSE-SR:2007:013",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2007_13_sr.html"
            },
            {
              "name": "SUSE-SA:2007:044",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html"
            },
            {
              "name": "2007-0019",
              "refsource": "TRUSTIX",
              "tags": [],
              "url": "http://www.trustix.org/errata/2007/0019/"
            },
            {
              "name": "2007-0023",
              "refsource": "TRUSTIX",
              "tags": [],
              "url": "http://www.trustix.org/errata/2007/0023/"
            },
            {
              "name": "USN-473-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/usn-473-1"
            },
            {
              "name": "24089",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/24089"
            },
            {
              "name": "1018187",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1018187"
            },
            {
              "name": "25378",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25378"
            },
            {
              "name": "25362",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25362"
            },
            {
              "name": "25353",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25353"
            },
            {
              "name": "25535",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25535"
            },
            {
              "name": "25590",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25590"
            },
            {
              "name": "25575",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25575"
            },
            {
              "name": "25646",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25646"
            },
            {
              "name": "25658",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25658"
            },
            {
              "name": "25657",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25657"
            },
            {
              "name": "25855",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25855"
            },
            {
              "name": "26048",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26048"
            },
            {
              "name": "26231",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26231"
            },
            {
              "name": "26390",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26390"
            },
            {
              "name": "26930",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26930"
            },
            {
              "name": "26871",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26871"
            },
            {
              "name": "26895",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26895"
            },
            {
              "name": "26967",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26967"
            },
            {
              "name": "27037",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27037"
            },
            {
              "name": "27110",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27110"
            },
            {
              "name": "25787",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/25787"
            },
            {
              "name": "27545",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27545"
            },
            {
              "name": "27102",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/27102"
            },
            {
              "name": "RHSA-2008:0146",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0146.html"
            },
            {
              "name": "29157",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/29157"
            },
            {
              "name": "GLSA-200805-13",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200805-13.xml"
            },
            {
              "name": "30168",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/30168"
            },
            {
              "name": "SSRT071447",
              "refsource": "HP",
              "tags": [],
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795"
            },
            {
              "name": "ADV-2007-2336",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/2336"
            },
            {
              "name": "ADV-2007-1905",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/1905"
            },
            {
              "name": "ADV-2007-1904",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/1904"
            },
            {
              "name": "ADV-2007-3386",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/3386"
            },
            {
              "name": "ADV-2007-2016",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/2016"
            },
            {
              "name": "36643",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/36643"
            },
            {
              "name": "35788",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/35788"
            },
            {
              "name": "gd-gdpngreaddata-dos(34420)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34420"
            },
            {
              "name": "oval:org.mitre.oval:def:10779",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10779"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2017-10-11T01:32Z",
      "publishedDate": "2007-05-18T18:30Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "gd-2.3.3-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the gd-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10777",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10777-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2007-2756 page",
        "url": "https://www.suse.com/security/cve/CVE-2007-2756/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-10166 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-10166/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-10167 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-10167/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-10168 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-10168/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6912 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6912/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9317 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9317/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-6362 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-6362/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7890 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7890/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-1000222 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-1000222/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14553 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14553/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-5711 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-5711/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11038 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11038/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-6977 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-6977/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-6978 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-6978/"
      }
    ],
    "title": "gd-2.3.3-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10777-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gd-2.3.3-1.1.aarch64",
                "product": {
                  "name": "gd-2.3.3-1.1.aarch64",
                  "product_id": "gd-2.3.3-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "gd-devel-2.3.3-1.1.aarch64",
                "product": {
                  "name": "gd-devel-2.3.3-1.1.aarch64",
                  "product_id": "gd-devel-2.3.3-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "gd-devel-32bit-2.3.3-1.1.aarch64",
                "product": {
                  "name": "gd-devel-32bit-2.3.3-1.1.aarch64",
                  "product_id": "gd-devel-32bit-2.3.3-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-2.3.3-1.1.aarch64",
                "product": {
                  "name": "libgd3-2.3.3-1.1.aarch64",
                  "product_id": "libgd3-2.3.3-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-32bit-2.3.3-1.1.aarch64",
                "product": {
                  "name": "libgd3-32bit-2.3.3-1.1.aarch64",
                  "product_id": "libgd3-32bit-2.3.3-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gd-2.3.3-1.1.ppc64le",
                "product": {
                  "name": "gd-2.3.3-1.1.ppc64le",
                  "product_id": "gd-2.3.3-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "gd-devel-2.3.3-1.1.ppc64le",
                "product": {
                  "name": "gd-devel-2.3.3-1.1.ppc64le",
                  "product_id": "gd-devel-2.3.3-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "gd-devel-32bit-2.3.3-1.1.ppc64le",
                "product": {
                  "name": "gd-devel-32bit-2.3.3-1.1.ppc64le",
                  "product_id": "gd-devel-32bit-2.3.3-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-2.3.3-1.1.ppc64le",
                "product": {
                  "name": "libgd3-2.3.3-1.1.ppc64le",
                  "product_id": "libgd3-2.3.3-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-32bit-2.3.3-1.1.ppc64le",
                "product": {
                  "name": "libgd3-32bit-2.3.3-1.1.ppc64le",
                  "product_id": "libgd3-32bit-2.3.3-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gd-2.3.3-1.1.s390x",
                "product": {
                  "name": "gd-2.3.3-1.1.s390x",
                  "product_id": "gd-2.3.3-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "gd-devel-2.3.3-1.1.s390x",
                "product": {
                  "name": "gd-devel-2.3.3-1.1.s390x",
                  "product_id": "gd-devel-2.3.3-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "gd-devel-32bit-2.3.3-1.1.s390x",
                "product": {
                  "name": "gd-devel-32bit-2.3.3-1.1.s390x",
                  "product_id": "gd-devel-32bit-2.3.3-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-2.3.3-1.1.s390x",
                "product": {
                  "name": "libgd3-2.3.3-1.1.s390x",
                  "product_id": "libgd3-2.3.3-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-32bit-2.3.3-1.1.s390x",
                "product": {
                  "name": "libgd3-32bit-2.3.3-1.1.s390x",
                  "product_id": "libgd3-32bit-2.3.3-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gd-2.3.3-1.1.x86_64",
                "product": {
                  "name": "gd-2.3.3-1.1.x86_64",
                  "product_id": "gd-2.3.3-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "gd-devel-2.3.3-1.1.x86_64",
                "product": {
                  "name": "gd-devel-2.3.3-1.1.x86_64",
                  "product_id": "gd-devel-2.3.3-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "gd-devel-32bit-2.3.3-1.1.x86_64",
                "product": {
                  "name": "gd-devel-32bit-2.3.3-1.1.x86_64",
                  "product_id": "gd-devel-32bit-2.3.3-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-2.3.3-1.1.x86_64",
                "product": {
                  "name": "libgd3-2.3.3-1.1.x86_64",
                  "product_id": "libgd3-2.3.3-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-32bit-2.3.3-1.1.x86_64",
                "product": {
                  "name": "libgd3-32bit-2.3.3-1.1.x86_64",
                  "product_id": "libgd3-32bit-2.3.3-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-2.3.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64"
        },
        "product_reference": "gd-2.3.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-2.3.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le"
        },
        "product_reference": "gd-2.3.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-2.3.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x"
        },
        "product_reference": "gd-2.3.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-2.3.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64"
        },
        "product_reference": "gd-2.3.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-devel-2.3.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64"
        },
        "product_reference": "gd-devel-2.3.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-devel-2.3.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le"
        },
        "product_reference": "gd-devel-2.3.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-devel-2.3.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x"
        },
        "product_reference": "gd-devel-2.3.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-devel-2.3.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64"
        },
        "product_reference": "gd-devel-2.3.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-devel-32bit-2.3.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64"
        },
        "product_reference": "gd-devel-32bit-2.3.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-devel-32bit-2.3.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le"
        },
        "product_reference": "gd-devel-32bit-2.3.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-devel-32bit-2.3.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x"
        },
        "product_reference": "gd-devel-32bit-2.3.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-devel-32bit-2.3.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64"
        },
        "product_reference": "gd-devel-32bit-2.3.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-2.3.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64"
        },
        "product_reference": "libgd3-2.3.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-2.3.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le"
        },
        "product_reference": "libgd3-2.3.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-2.3.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x"
        },
        "product_reference": "libgd3-2.3.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-2.3.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64"
        },
        "product_reference": "libgd3-2.3.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-32bit-2.3.3-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64"
        },
        "product_reference": "libgd3-32bit-2.3.3-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-32bit-2.3.3-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le"
        },
        "product_reference": "libgd3-32bit-2.3.3-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-32bit-2.3.3-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x"
        },
        "product_reference": "libgd3-32bit-2.3.3-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-32bit-2.3.3-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        },
        "product_reference": "libgd3-32bit-2.3.3-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2007-2756",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2007-2756"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2007-2756",
          "url": "https://www.suse.com/security/cve/CVE-2007-2756"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 276525 for CVE-2007-2756",
          "url": "https://bugzilla.suse.com/276525"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 282730 for CVE-2007-2756",
          "url": "https://bugzilla.suse.com/282730"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2007-2756"
    },
    {
      "cve": "CVE-2016-10166",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-10166"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-10166",
          "url": "https://www.suse.com/security/cve/CVE-2016-10166"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1022069 for CVE-2016-10166",
          "url": "https://bugzilla.suse.com/1022069"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1022263 for CVE-2016-10166",
          "url": "https://bugzilla.suse.com/1022263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-10166"
    },
    {
      "cve": "CVE-2016-10167",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-10167"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-10167",
          "url": "https://www.suse.com/security/cve/CVE-2016-10167"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1022069 for CVE-2016-10167",
          "url": "https://bugzilla.suse.com/1022069"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1022264 for CVE-2016-10167",
          "url": "https://bugzilla.suse.com/1022264"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-10167"
    },
    {
      "cve": "CVE-2016-10168",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-10168"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-10168",
          "url": "https://www.suse.com/security/cve/CVE-2016-10168"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1022069 for CVE-2016-10168",
          "url": "https://bugzilla.suse.com/1022069"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1022265 for CVE-2016-10168",
          "url": "https://bugzilla.suse.com/1022265"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-10168"
    },
    {
      "cve": "CVE-2016-6912",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6912"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6912",
          "url": "https://www.suse.com/security/cve/CVE-2016-6912"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1022284 for CVE-2016-6912",
          "url": "https://bugzilla.suse.com/1022284"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6912"
    },
    {
      "cve": "CVE-2016-9317",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9317"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9317",
          "url": "https://www.suse.com/security/cve/CVE-2016-9317"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1022283 for CVE-2016-9317",
          "url": "https://bugzilla.suse.com/1022283"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-9317"
    },
    {
      "cve": "CVE-2017-6362",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-6362"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-6362",
          "url": "https://www.suse.com/security/cve/CVE-2017-6362"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056993 for CVE-2017-6362",
          "url": "https://bugzilla.suse.com/1056993"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-6362"
    },
    {
      "cve": "CVE-2017-7890",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7890"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700 bytes from the top of the stack, potentially disclosing sensitive information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7890",
          "url": "https://www.suse.com/security/cve/CVE-2017-7890"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1050241 for CVE-2017-7890",
          "url": "https://bugzilla.suse.com/1050241"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-7890"
    },
    {
      "cve": "CVE-2018-1000222",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-1000222"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-1000222",
          "url": "https://www.suse.com/security/cve/CVE-2018-1000222"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105434 for CVE-2018-1000222",
          "url": "https://bugzilla.suse.com/1105434"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-1000222"
    },
    {
      "cve": "CVE-2018-14553",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14553"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14553",
          "url": "https://www.suse.com/security/cve/CVE-2018-14553"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165471 for CVE-2018-14553",
          "url": "https://bugzilla.suse.com/1165471"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-14553"
    },
    {
      "cve": "CVE-2018-5711",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-5711"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-5711",
          "url": "https://www.suse.com/security/cve/CVE-2018-5711"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1076391 for CVE-2018-5711",
          "url": "https://bugzilla.suse.com/1076391"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-5711"
    },
    {
      "cve": "CVE-2019-11038",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11038"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized variable. This may lead to disclosing contents of the stack that has been left there by previous code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11038",
          "url": "https://www.suse.com/security/cve/CVE-2019-11038"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1140118 for CVE-2019-11038",
          "url": "https://bugzilla.suse.com/1140118"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1140120 for CVE-2019-11038",
          "url": "https://bugzilla.suse.com/1140120"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-11038"
    },
    {
      "cve": "CVE-2019-6977",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-6977"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-6977",
          "url": "https://www.suse.com/security/cve/CVE-2019-6977"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123354 for CVE-2019-6977",
          "url": "https://bugzilla.suse.com/1123354"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123361 for CVE-2019-6977",
          "url": "https://bugzilla.suse.com/1123361"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-6977"
    },
    {
      "cve": "CVE-2019-6978",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-6978"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-6978",
          "url": "https://www.suse.com/security/cve/CVE-2019-6978"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123522 for CVE-2019-6978",
          "url": "https://bugzilla.suse.com/1123522"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:gd-devel-32bit-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-2.3.3-1.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-2.3.3-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-6978"
    }
  ]
}