Cloudanix VulnDB

CVE-2014-2497

None

CVSS

—

EPSS

20.3%

Published

Mar 21, 2014

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A problem in the way some applications read certain image files can make those applications crash when they receive a specially crafted picture.

Exploit Available
Exploitation
Remote Unauthenticated
Attacker needs
None
Complexity
Moderate
Impact
Denial Of Service
Component
Library
Class
Memory Corruption
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

NULL pointer dereference in gdImageCreateFromXpm triggered by a malformed color table in an XPM file, resulting in immediate process crash.

Why it matters to the business

Service outages and application restarts when untrusted image files are processed; low urgency due to age and modest exploitation probability, though affected Chainguard images must still be updated to avoid operational disruption.

How an attack unfolds

An attacker prepares an XPM file containing a deliberately invalid color table, then causes the target application (built against the vulnerable libgd) to call gdImageCreateFromXpm on that file, producing a NULL dereference and crash.

How to fix it

Upgrade prometheus-adapter-fips-0.10 (Chainguard) to version 0.10.1-r7 or later; rebuild any containers or images that embed the vulnerable libgd package.

How to confirm the fix worked

Confirm the installed package version matches or exceeds the fixed release; optionally replay a minimal crafted XPM against a test instance and verify the process no longer crashes.

Typical attack path

  1. Craft XPM file with invalid color table entries
  2. Deliver the file to the application via upload, web request, or file processing pipeline
  3. Trigger gdImageCreateFromXpm on the supplied file
  4. Observe application crash and denial of service

How to detect it

Monitor application and container logs for abrupt terminations during image parsing; correlate crashes with recent receipt of XPM or image-upload requests.

What your security team should do

  • Apply the 0.10.1-r7 update across all affected Chainguard images within normal change windows
  • Add image-processing libraries to the vulnerability scanning policy
  • Review any custom code paths that accept XPM or other image formats from external sources

The record

The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.

Affected packages

Ecosystem Package Introduced Fixed
Debian:10 libgd2 0 2.1.0-4
Debian:11 libgd2 0 2.1.0-4
Debian:12 libgd2 0 2.1.0-4
Debian:13 libgd2 0 2.1.0-4
Debian:6.0 libgd2 0 2.0.36~rc1~dfsg-5+deb6u1
Debian:7 libgd2 0 2.0.36~rc1~dfsg-6.1+deb7u1
Mageia:3 gd 0 2.0.35-20.1.mga3
Mageia:3 php 0 5.4.30-1.mga3
Mageia:3 php-apc 0 3.1.14-7.10.mga3
Mageia:3 php-gd-bundled 0 5.4.30-1.mga3
Mageia:4 libgd 0 2.1.0-3.1.mga4
Red Hat:enterprise_linux:5::client_workstation php53 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-bcmath 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-cli 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-common 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-dba 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-debuginfo 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-devel 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-gd 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-imap 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-intl 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-ldap 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-mbstring 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-mysql 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-odbc 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-pdo 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-pgsql 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-process 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-pspell 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-snmp 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-soap 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-xml 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::client_workstation php53-xmlrpc 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-bcmath 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-cli 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-common 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-dba 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-debuginfo 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-devel 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-gd 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-imap 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-intl 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-ldap 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-mbstring 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-mysql 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-odbc 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-pdo 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-pgsql 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-process 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-pspell 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-snmp 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-soap 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-xml 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:5::server php53-xmlrpc 0 0:5.3.3-24.el5
Red Hat:enterprise_linux:6::client php 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-bcmath 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-cli 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-common 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-dba 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-debuginfo 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-devel 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-embedded 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-enchant 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-fpm 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-gd 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-imap 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-intl 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-ldap 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-mbstring 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-mysql 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-odbc 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-pdo 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-pgsql 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-process 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-pspell 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-recode 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-snmp 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-soap 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-tidy 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-xml 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-xmlrpc 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::client php-zts 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-bcmath 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-cli 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-common 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-dba 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-debuginfo 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-devel 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-embedded 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-enchant 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-fpm 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-gd 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-imap 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-intl 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-ldap 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-mbstring 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-mysql 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-odbc 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-pdo 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-pgsql 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-process 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-pspell 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-recode 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-snmp 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-soap 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-tidy 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-xml 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-xmlrpc 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::computenode php-zts 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-bcmath 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-cli 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-common 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-dba 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-debuginfo 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-devel 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-embedded 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-enchant 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-fpm 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-gd 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-imap 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-intl 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-ldap 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-mbstring 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-mysql 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-odbc 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-pdo 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-pgsql 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-process 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-pspell 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-recode 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-snmp 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-soap 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-tidy 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-xml 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-xmlrpc 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::server php-zts 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-bcmath 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-cli 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-common 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-dba 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-debuginfo 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-devel 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-embedded 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-enchant 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-fpm 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-gd 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-imap 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-intl 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-ldap 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-mbstring 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-mysql 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-odbc 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-pdo 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-pgsql 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-process 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-pspell 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-recode 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-snmp 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-soap 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-tidy 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-xml 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-xmlrpc 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:6::workstation php-zts 0 0:5.3.3-27.el6_5.2
Red Hat:enterprise_linux:7::client php 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-bcmath 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-cli 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-common 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-dba 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-debuginfo 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-devel 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-embedded 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-enchant 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-fpm 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-gd 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-intl 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-ldap 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-mbstring 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-mysql 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-mysqlnd 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-odbc 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-pdo 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-pgsql 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-process 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-pspell 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-recode 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-snmp 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-soap 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-xml 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::client php-xmlrpc 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::computenode php 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::computenode php-bcmath 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::computenode php-cli 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::computenode php-common 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::computenode php-dba 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::computenode php-debuginfo 0 0:5.4.16-23.el7_0.1
Red Hat:enterprise_linux:7::computenode php-devel 0 0:5.4.16-23.el7_0.1

Related vulnerabilities