CVE-2017-7890: php
Vulnerability summary
CVE-2017-7890 is a medium (CVSS 6.5) vulnerability in php. EPSS estimates a 3.42% chance of exploitation in the next 30 days, higher than 88.9% of scored vulnerabilities.
Not severe (CVSS 6.5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 7 · Related 5Timeline
- 02-08-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700 bytes from the top of the stack, potentially disclosing sensitive information.
CVSS metrics
6 scores · 5 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- OSV · Red hatEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NDiffers
- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS trend
Probability
3.42%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
No change 0.00 pp
From 3.42% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat26 products
- php< 0:5.4.16-43.el7_4.1
- php-bcmath< 0:5.4.16-43.el7_4.1
- php-cli< 0:5.4.16-43.el7_4.1
- php-common< 0:5.4.16-43.el7_4.1
- php-dba< 0:5.4.16-43.el7_4.1
Alpine2 products
- gd< 2.2.5-r0
- php7< 7.1.7-r0
Debian1 product
- libgd2< 2.2.5-1 | < 2.1.0-5+deb8u10 | < 2.2.4-2+deb9u1 | < 2.0.36~rc1~dfsg-6.1+deb7u9
Php1 product
- phpEOL≤ 5.6.30 | 7.0.0 | 7.0.1 | 7.0.2 | 7.0.3 | 7.0.4 | 7.0.5 | 7.0.6 | 7.0.7 | 7.0.8 | 7.0.9 | 7.0.10 | 7.0.11 | 7.0.12 | 7.0.13 | 7.0.14 | 7.0.15 | 7.0.16 | 7.0.17 | 7.0.18 | 7.0.19 | 7.0.20 | 7.1.0 | 7.1.1 | 7.1.2 | 7.1.3 | 7.1.4 | 7.1.5 | 7.1.6
Ubuntu1 product
- libgd2< 2.1.0-3ubuntu0.7 | < 2.1.1-4ubuntu0.16.04.7
5 vendors · 31 products
References
21 links- bugs.php.net/patch-display.php?bug=74435&patch=fix-74435-php-7.0&revision=1497970038X Refsource CONFIRMIssue TrackingPatchVendor Advisory
- www.tenable.com/security/tns-2017-12X Refsource CONFIRM
- security.netapp.com/advisory/ntap-20180112-0001/X Refsource CONFIRM
