CVE-2007-2756: libgd

Modified

AliasesDEBIAN-CVE-2007-2756

Published 18-05-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-2756 is a medium (CVSS 4.3) vulnerability in libgd. EPSS estimates a 4.27% chance of exploitation in the next 30 days, higher than 91% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 4.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

4.27%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6 · Related 1

DSA-1613-1 OPENSUSE-SU-2024:10777-1 RHSA-2007:0889 RHSA-2007:0890 RHSA-2007:0891 RHSA-2008:0146

Timeline

18-05-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

4.27%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

No change 0.00 pp

From 4.27% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Debian1 product

libgd2< 2.0.35.dfsg-1

Libgd1 product

libgd2.0.34

2 vendors · 2 products

References

63 links

secunia.com/advisories/26231Third Party AdvisoryX Refsource SECUNIA
osvdb.org/36643VDB EntryX Refsource OSVDB
www.securitytracker.com/id?1018187VDB EntryX Refsource SECTRACK
secunia.com/advisories/29157Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25658Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27110Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25590Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26048Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/34420VDB EntryX Refsource XF
secunia.com/advisories/25362Third Party AdvisoryX Refsource SECUNIA

Show all 63 references

www.openpkg.com/security/advisories/OpenPKG-SA-2007.020.htmlVendor AdvisoryX Refsource OPENPKG
secunia.com/advisories/25657Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/25855Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26967Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:122Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2007/2016VDB EntryX Refsource VUPEN
security.gentoo.org/glsa/glsa-200805-13.xmlVendor AdvisoryX Refsource GENTOO
www.gentoo.org/security/en/glsa/glsa-200710-02.xmlVendor AdvisoryX Refsource GENTOO
www.mandriva.com/security/advisories?name=MDKSA-2007:123Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/bid/24089VDB EntryX Refsource BID
www.libgd.org/ReleaseNote020035X Refsource CONFIRM
security.gentoo.org/glsa/glsa-200708-05.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/30168Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:124Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2007/1904VDB EntryX Refsource VUPEN
secunia.com/advisories/26930Third Party AdvisoryX Refsource SECUNIA
osvdb.org/35788VDB EntryX Refsource OSVDB
www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.htmlVendor AdvisoryX Refsource FEDORA
www.vupen.com/english/advisories/2007/2336VDB EntryX Refsource VUPEN
rhn.redhat.com/errata/RHSA-2007-0889.htmlVendor AdvisoryX Refsource REDHAT
www.trustix.org/errata/2007/0023/Vendor AdvisoryX Refsource TRUSTIX
secunia.com/advisories/25353Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2007/3386VDB EntryX Refsource VUPEN
bugs.libgd.org?do=details&task_id=86X Refsource CONFIRMPatch
www.trustix.org/errata/2007/0019/Vendor AdvisoryX Refsource TRUSTIX
secunia.com/advisories/27037Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2007_13_sr.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/25378Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27545Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200711-34.xmlVendor AdvisoryX Refsource GENTOO
support.avaya.com/elmodocs2/security/ASA-2007-449.htmX Refsource CONFIRM
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.482863Vendor AdvisoryX Refsource SLACKWARE
secunia.com/advisories/25646Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0146.htmlVendor AdvisoryX Refsource REDHAT
www.php.net/releases/5_2_3.phpX Refsource CONFIRM
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795Vendor AdvisoryX Refsource HP
issues.rpath.com/browse/RPL-1394X Refsource CONFIRM
secunia.com/advisories/25535Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:187Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/27102Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10779VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/26895Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25787Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25575Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2007-0890.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2007/1905VDB EntryX Refsource VUPEN
secunia.com/advisories/26390Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2007-0891.htmlVendor AdvisoryX Refsource REDHAT
www.ubuntu.com/usn/usn-473-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/26871Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.htmlVendor AdvisoryX Refsource SUSE
security-tracker.debian.org/tracker/CVE-2007-2756Advisory