CVE-2018-5711

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-5711
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-5711.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-5711
Related
Published
2018-01-16T09:29:00Z
Modified
2024-10-12T04:05:28.319107Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

gdgifin.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx.

References

Affected packages

Alpine:v3.10 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.11 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.12 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.13 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.14 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.15 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.16 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.17 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.18 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.19 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.20 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.4 / php5

Package

Name
php5
Purl
pkg:apk/alpine/php5?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.6.33-r0

Affected versions

5.*

5.2.8-r0
5.2.8-r1
5.2.9-r0
5.2.10-r0
5.2.10-r2
5.2.10-r3
5.2.10-r4
5.2.11-r0
5.3.0-r0
5.3.0-r1
5.3.0-r2
5.3.0-r3
5.3.1-r0
5.3.1-r1
5.3.1-r2
5.3.1-r3
5.3.1-r4
5.3.1-r5
5.3.2-r0
5.3.2-r1
5.3.2-r2
5.3.2-r3
5.3.2-r4
5.3.2-r5
5.3.2-r6
5.3.2-r7
5.3.2-r8
5.3.3-r0
5.3.3-r1
5.3.3-r2
5.3.3-r3
5.3.3-r4
5.3.3-r5
5.3.4-r0
5.3.4-r1
5.3.4-r2
5.3.5-r0
5.3.5-r1
5.3.5-r2
5.3.5-r3
5.3.5-r4
5.3.5-r5
5.3.5-r6
5.3.5-r7
5.3.6-r0
5.3.6-r1
5.3.6-r2
5.3.6-r3
5.3.6-r4
5.3.6-r5
5.3.6-r6
5.3.6-r7
5.3.6-r8
5.3.6-r9
5.3.6-r10
5.3.6-r11
5.3.7-r0
5.3.7-r1
5.3.8-r0
5.3.8-r1
5.3.8-r2
5.3.9-r0
5.3.9-r1
5.3.10-r0
5.3.10-r1
5.3.10-r2
5.3.10-r3
5.3.10-r4
5.3.10-r5
5.3.12-r0
5.3.12-r1
5.3.12-r2
5.3.12-r3
5.3.15-r3
5.3.16-r0
5.3.17-r0
5.3.18-r0
5.3.19-r0
5.3.20-r0
5.3.20-r1
5.3.21-r1
5.3.21-r2
5.3.23-r0
5.3.23-r1
5.4.14-r0
5.4.14-r1
5.4.14-r2
5.4.14-r3
5.4.15-r0
5.4.15-r1
5.4.16-r0
5.4.17-r0
5.4.17-r1
5.4.19-r0
5.4.20-r0
5.5.4-r0
5.5.4-r1
5.5.5-r0
5.5.5-r1
5.5.5-r2
5.5.6-r0
5.5.6-r1
5.5.7-r0
5.5.8-r0
5.5.8-r1
5.5.9-r0
5.5.10-r0
5.5.11-r0
5.5.11-r1
5.5.12-r0
5.5.13-r0
5.5.13-r1
5.5.13-r2
5.5.13-r3
5.5.13-r4
5.5.14-r0
5.5.15-r0
5.5.15-r1
5.5.16-r0
5.6.1-r0
5.6.1-r1
5.6.1-r2
5.6.2-r0
5.6.2-r1
5.6.3-r0
5.6.4-r0
5.6.5-r0
5.6.5-r1
5.6.6-r0
5.6.7-r0
5.6.7-r1
5.6.8-r0
5.6.8-r1
5.6.9-r0
5.6.9-r1
5.6.10-r0
5.6.11-r0
5.6.12-r0
5.6.13-r0
5.6.14-r0
5.6.15-r0
5.6.15-r1
5.6.15-r2
5.6.15-r3
5.6.16-r0
5.6.17-r0
5.6.18-r0
5.6.18-r1
5.6.19-r0
5.6.19-r1
5.6.20-r0
5.6.21-r0
5.6.21-r1
5.6.21-r2
5.6.23-r0
5.6.24-r0
5.6.25-r0
5.6.26-r0
5.6.27-r0
5.6.28-r0
5.6.29-r0
5.6.30-r0
5.6.31-r0

Alpine:v3.5 / php5

Package

Name
php5
Purl
pkg:apk/alpine/php5?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.6.33-r0

Affected versions

5.*

5.2.8-r0
5.2.8-r1
5.2.9-r0
5.2.10-r0
5.2.10-r2
5.2.10-r3
5.2.10-r4
5.2.11-r0
5.3.0-r0
5.3.0-r1
5.3.0-r2
5.3.0-r3
5.3.1-r0
5.3.1-r1
5.3.1-r2
5.3.1-r3
5.3.1-r4
5.3.1-r5
5.3.2-r0
5.3.2-r1
5.3.2-r2
5.3.2-r3
5.3.2-r4
5.3.2-r5
5.3.2-r6
5.3.2-r7
5.3.2-r8
5.3.3-r0
5.3.3-r1
5.3.3-r2
5.3.3-r3
5.3.3-r4
5.3.3-r5
5.3.4-r0
5.3.4-r1
5.3.4-r2
5.3.5-r0
5.3.5-r1
5.3.5-r2
5.3.5-r3
5.3.5-r4
5.3.5-r5
5.3.5-r6
5.3.5-r7
5.3.6-r0
5.3.6-r1
5.3.6-r2
5.3.6-r3
5.3.6-r4
5.3.6-r5
5.3.6-r6
5.3.6-r7
5.3.6-r8
5.3.6-r9
5.3.6-r10
5.3.6-r11
5.3.7-r0
5.3.7-r1
5.3.8-r0
5.3.8-r1
5.3.8-r2
5.3.9-r0
5.3.9-r1
5.3.10-r0
5.3.10-r1
5.3.10-r2
5.3.10-r3
5.3.10-r4
5.3.10-r5
5.3.12-r0
5.3.12-r1
5.3.12-r2
5.3.12-r3
5.3.15-r3
5.3.16-r0
5.3.17-r0
5.3.18-r0
5.3.19-r0
5.3.20-r0
5.3.20-r1
5.3.21-r1
5.3.21-r2
5.3.23-r0
5.3.23-r1
5.4.14-r0
5.4.14-r1
5.4.14-r2
5.4.14-r3
5.4.15-r0
5.4.15-r1
5.4.16-r0
5.4.17-r0
5.4.17-r1
5.4.19-r0
5.4.20-r0
5.5.4-r0
5.5.4-r1
5.5.5-r0
5.5.5-r1
5.5.5-r2
5.5.6-r0
5.5.6-r1
5.5.7-r0
5.5.8-r0
5.5.8-r1
5.5.9-r0
5.5.10-r0
5.5.11-r0
5.5.11-r1
5.5.12-r0
5.5.13-r0
5.5.13-r1
5.5.13-r2
5.5.13-r3
5.5.13-r4
5.5.14-r0
5.5.15-r0
5.5.15-r1
5.5.16-r0
5.6.1-r0
5.6.1-r1
5.6.1-r2
5.6.2-r0
5.6.2-r1
5.6.3-r0
5.6.4-r0
5.6.5-r0
5.6.5-r1
5.6.6-r0
5.6.7-r0
5.6.7-r1
5.6.8-r0
5.6.8-r1
5.6.9-r0
5.6.9-r1
5.6.10-r0
5.6.11-r0
5.6.12-r0
5.6.13-r0
5.6.14-r0
5.6.15-r0
5.6.15-r1
5.6.15-r2
5.6.15-r3
5.6.16-r0
5.6.17-r0
5.6.18-r0
5.6.18-r1
5.6.19-r0
5.6.19-r1
5.6.20-r0
5.6.21-r0
5.6.21-r1
5.6.21-r2
5.6.22-r0
5.6.23-r0
5.6.24-r0
5.6.25-r0
5.6.25-r1
5.6.26-r0
5.6.26-r1
5.6.27-r0
5.6.28-r0
5.6.29-r0
5.6.29-r1
5.6.30-r0
5.6.31-r0
5.6.32-r0

Alpine:v3.6 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.7 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.8 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Alpine:v3.9 / gd

Package

Name
gd
Purl
pkg:apk/alpine/gd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-r2

Affected versions

2.*

2.0.35-r0
2.0.35-r1
2.0.35-r2
2.0.36_rc1-r0
2.0.36_rc1-r1
2.0.36_rc1-r2
2.0.36_rc1-r3
2.0.36_rc1-r4
2.0.36_rc1-r5
2.0.36_rc1-r6
2.0.36_rc1-r7
2.0.36_rc1-r8
2.0.36_rc1-r9
2.1.0-r0
2.1.0-r1
2.1.1-r0
2.2.1-r0
2.2.3-r0
2.2.3-r1
2.2.4-r0
2.2.4-r1
2.2.4-r2
2.2.5-r0
2.2.5-r1

Debian:11 / libgd2

Package

Name
libgd2
Purl
pkg:deb/debian/libgd2?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-4.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / libgd2

Package

Name
libgd2
Purl
pkg:deb/debian/libgd2?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-4.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / libgd2

Package

Name
libgd2
Purl
pkg:deb/debian/libgd2?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.5-4.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/php/php-src

Affected ranges

Type
GIT
Repo
https://github.com/php/php-src
Events
Last affected
2d16947f209c40fa4cccc56833aa0807790d52b8
Introduced
60fffd296abce5fc071f3c173c25a2696cf683c6
Last affected
532aa2d2aeb4a1f590f30d4063445473182f9a38
Last affected
6f21492505dd554667f70884b46802f2fb81c210
Last affected
8148cbb78841c8ec0759c0836e7f35dec799d300