php70-gd vulnerabilities

Known vulnerabilities in the php70-gd package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M NULL Pointer Dereference	<0:7.0.33-1.32.amzn1
M Arbitrary Argument Injection	<0:7.0.33-1.32.amzn1
M Cross-site Scripting (XSS)	<0:7.0.32-1.31.amzn1
L Out-of-bounds Read	<0:7.0.31-1.30.amzn1
L Out-of-bounds Read	<0:7.0.31-1.30.amzn1
M NULL Pointer Dereference	<0:7.0.30-1.29.amzn1
M Out-of-bounds Read	<0:7.0.30-1.29.amzn1
M Cross-site Scripting (XSS)	<0:7.0.30-1.29.amzn1
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:7.0.30-1.29.amzn1
M Out-of-Bounds	<0:7.0.29-1.28.amzn1
M Cross-site Scripting (XSS)	<0:7.0.27-1.27.amzn1
M Incorrect Conversion between Numeric Types	<0:7.0.27-1.27.amzn1
H Out-of-Bounds	<0:7.0.25-1.25.amzn1
M NULL Pointer Dereference	<0:7.0.21-1.23.amzn1
M Out-of-bounds Write	<0:7.0.21-1.23.amzn1
M Out-of-bounds Read	<0:7.0.21-1.23.amzn1
M Out-of-bounds Write	<0:7.0.21-1.23.amzn1
M Information Exposure	<0:7.0.21-1.23.amzn1
M Out-of-bounds Read	<0:7.0.21-1.23.amzn1
M Integer Overflow or Wraparound	<0:7.0.16-1.21.amzn1
M Use After Free	<0:7.0.16-1.21.amzn1
M Integer Overflow or Wraparound	<0:7.0.16-1.21.amzn1
M NULL Pointer Dereference	<0:7.0.16-1.21.amzn1
M Out-of-bounds Read	<0:7.0.16-1.21.amzn1
M Numeric Errors	<0:7.0.16-1.21.amzn1
M Integer Overflow or Wraparound	<0:7.0.16-1.21.amzn1
M Out-of-Bounds	<0:7.0.16-1.21.amzn1
M Improper Input Validation	<0:7.0.16-1.21.amzn1
M Use After Free	<0:7.0.14-1.20.amzn1
M NULL Pointer Dereference	<0:7.0.14-1.20.amzn1
M Out-of-bounds Read	<0:7.0.14-1.20.amzn1
M Improper Input Validation	<0:7.0.14-1.20.amzn1
M Out-of-Bounds	<0:7.0.14-1.20.amzn1
M Use After Free	<0:7.0.14-1.20.amzn1
M Out-of-Bounds	<0:7.0.11-1.16.amzn1
M Improper Input Validation	<0:7.0.11-1.16.amzn1
M Stack-based Buffer Overflow	<0:7.0.11-1.16.amzn1
M Out-of-Bounds	<0:7.0.11-1.16.amzn1
M Use After Free	<0:7.0.11-1.16.amzn1
M Heap-based Buffer Overflow	<0:7.0.11-1.16.amzn1

Vulnerability

Vulnerable Version

NULL Pointer Dereference

<0:7.0.33-1.32.amzn1

Arbitrary Argument Injection

<0:7.0.33-1.32.amzn1

Cross-site Scripting (XSS)

<0:7.0.32-1.31.amzn1

Out-of-bounds Read

<0:7.0.31-1.30.amzn1

Out-of-bounds Read

<0:7.0.31-1.30.amzn1