The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:4659 advisory.

  - gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to     crash an application via a specific function call sequence. Only affects PHP when linked with an external     libgd (not bundled). (CVE-2018-14553)

  - gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the     imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger     imagecolormatch calls with crafted image data. (CVE-2019-6977)

  - The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in     gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected. (CVE-2019-6978)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The GD Graphics Library (aka LibGD) 2.2.5 has a double     free in the gdImage*Ptr() functions in gd_gif_out.c,     gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is     unaffected.(CVE-2019-6978)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gd fixes the following issues :

Security issues fixed :

  - CVE-2019-6977: Fixed a heap-based buffer overflow the GD     Graphics Library used in the imagecolormatch function     (bsc#1123361).

  - CVE-2019-6978: Fixed a double free in the gdImage*Ptr()     functions (bsc#1123522).

This update was imported from the SUSE:SLE-12:Update update project.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2722 advisory.

    The libwmf packages provide a library for reading and converting Windows Metafile Format (WMF) vector     graphics. The library is used by applications such as GIMP and ImageMagick.

    Security Fix(es):

    * gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

fixed multiple security bugs

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0059 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2019-6978:
    The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in     gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0054 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2018-14553:
    gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to     crash an application via a specific function call sequence. Only affects PHP when linked with an external     libgd (not bundled).

    CVE-2019-6977:
    gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the     imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before     7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger     imagecolormatch calls with crafted image data.

    CVE-2019-6978:
    The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in     gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
157619	AlmaLinux 8 : gd (ALSA-2020:4659)	Nessus	Alma Linux Local Security Checks	2/9/2022	2/14/2022	critical
126843	EulerOS 2.0 SP2 : gd (EulerOS-SA-2019-1715)	Nessus	Huawei Local Security Checks	7/22/2019	5/9/2024	critical
123770	openSUSE Security Update : gd (openSUSE-2019-1140)	Nessus	SuSE Local Security Checks	4/5/2019	6/5/2024	critical
128852	RHEL 8 : libwmf (RHSA-2019:2722)	Nessus	Red Hat Local Security Checks	9/16/2019	3/16/2025	critical
130792	Fedora 30 : gd (2019-ab7d22a466)	Nessus	Fedora Local Security Checks	11/12/2019	4/12/2024	critical
130800	Fedora 29 : gd (2019-d7f8995451)	Nessus	Fedora Local Security Checks	11/12/2019	4/12/2024	critical
131096	Fedora 31 : gd (2019-7a06c0e6b4)	Nessus	Fedora Local Security Checks	11/18/2019	4/11/2024	critical
236427	Alibaba Cloud Linux 3 : 0059: libwmf (ALINUX3-SA-2022:0059)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	critical
276393	TencentOS Server 3: gd (TSSA-2022:0054)	Nessus	Tencent Local Security Checks	11/20/2025	11/20/2025	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical