ALPINE-CVE-2018-5711

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2018-5711
Published: 16 Jan 2018, 09:29
Last modified:03 Dec 2025, 22:43

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
3.0 (osv_alpine)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Jan 2018, 09:29
Published
Vulnerability first disclosed
03 Dec 2025, 22:43
Last Modified
Vulnerability information updated

Description

gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or imagecreatefromstring PHP function. This is related to GetCode_ and gdImageCreateFromGifCtx.

CVSS Metrics

  • v3.0•MEDIUM•Score: 5.5CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Systems

  • alpine•gd

    < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2 | < 2.2.5-r2

  • alpine•php5

    < 5.6.33-r0 | < 5.6.33-r0

References (1)