[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNjUZSR9PQqRyFsaCHLzeUWcUyF9stNzox6dNY6B9Gng":3,"g5a-risk:CVE-2019-6977":259},{"success":4,"data":5,"meta":257},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":81,"references":82,"referencesCount":159,"weaknesses":160,"weaknessesCount":169,"isActivelyExploited":170,"cisaInfo":15,"otxData":15,"relatedBlogPosts":171,"seoMetadata":172,"configurations":197,"relatedVendorCves":248,"notableEvents":249},"CVE-2019-6977","What is CVE-2019-6977?","gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data.","gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before ...","2019-01-27T02:29:00.34","2023-11-07T03:13:16.517",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",2.8,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":35,"Authentication":24,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.71496,[40,40,40,40,40,40,40],"High",[44,48,52,55,60,63,68,71,74,77],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"libgd","2.2.5","cpe:2.3:a:libgd:libgd:2.2.5:*:*:*:*:*:*:*",{"vendor":49,"product":49,"version":50,"criteria":51,"vulnerable":4},"php","*","cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",{"vendor":49,"product":49,"version":53,"criteria":54,"vulnerable":4},"7.3.0","cpe:2.3:a:php:php:7.3.0:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":61,"criteria":62,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":64,"product":65,"version":66,"criteria":67,"vulnerable":4},"canonical","ubuntu_linux","14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":64,"product":65,"version":69,"criteria":70,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":64,"product":65,"version":72,"criteria":73,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":64,"product":65,"version":75,"criteria":76,"vulnerable":4},"18.10","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",{"vendor":78,"product":79,"version":50,"criteria":80,"vulnerable":4},"netapp","storage_automation_store","cpe:2.3:a:netapp:storage_automation_store:*:*:*:*:*:*:*:*",10,[83,87,90,94,100,103,109,113,116,122,126,130,133,136,139,143,148,152,155],{"url":84,"source":85,"tags":86},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-04\u002Fmsg00025.html","Opensuse",[],{"url":88,"source":85,"tags":89},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-04\u002Fmsg00031.html",[],{"url":91,"source":92,"tags":93},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F152459\u002FPHP-7.2-imagecolormatch-Out-Of-Band-Heap-Write.html","Packetstormsecurity",[],{"url":95,"source":96,"tags":97},"http:\u002F\u002Fphp.net\u002FChangeLog-5.php","Php",[98,99],"Release Notes","Vendor Advisory",{"url":101,"source":96,"tags":102},"http:\u002F\u002Fphp.net\u002FChangeLog-7.php",[98,99],{"url":104,"source":105,"tags":106},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F106731","Securityfocus",[107,108],"Third Party Advisory","VDB Entry",{"url":110,"source":111,"tags":112},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2519","Red Hat",[],{"url":114,"source":111,"tags":115},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3299",[],{"url":117,"source":96,"tags":118},"https:\u002F\u002Fbugs.php.net\u002Fbug.php?id=77270",[119,120,121,99],"Issue Tracking","Exploit","Mailing List",{"url":123,"source":124,"tags":125},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F01\u002Fmsg00028.html","Debian",[121,107],{"url":127,"source":128,"tags":129},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6\u002F","Fedoraproject",[],{"url":131,"source":128,"tags":132},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F3WRUPZVT2MWFUEMVGTRAGDOBHLNMGK5R\u002F",[],{"url":134,"source":128,"tags":135},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FTEYUUOW75YD3DENIPYMO263E6NL2NFHI\u002F",[],{"url":137,"source":128,"tags":138},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FTTXSLRZI5BCQT3H5KALG3DHUWUMNPDX2\u002F",[],{"url":140,"source":141,"tags":142},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201903-18","Gentoo",[107],{"url":144,"source":145,"tags":146},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20190315-0003\u002F","Netapp",[147,107],"Patch",{"url":149,"source":150,"tags":151},"https:\u002F\u002Fusn.ubuntu.com\u002F3900-1\u002F","Ubuntu",[107],{"url":153,"source":124,"tags":154},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2019\u002Fdsa-4384",[107],{"url":156,"source":157,"tags":158},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F46677\u002F","Exploit-db",[],19,[161],{"id":162,"name":163,"description":164,"extendedDescription":165,"status":166,"abstraction":167,"structure":168},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":173,"metaDescription":174,"keywords":175,"canonicalUrl":176,"structuredData":177},"What is CVE-2019-6977? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-6977, a high severity cyber security vulnerability from 2019. High exploit probability (71.5%). gdImageColorMatch in gd_co...","CVE-2019-6977, CVE-2019-6977 vulnerability, CVE-2019-6977 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, libgd security, php security, debian security, canonical security, netapp security, libgd vulnerability, php vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2019-6977",{"@context":178,"@type":179,"headline":173,"description":174,"datePublished":10,"dateModified":11,"author":180,"publisher":184,"about":188,"mainEntityOfPage":192,"articleSection":195,"keywords":196},"https:\u002F\u002Fschema.org","TechArticle",{"@type":181,"name":182,"url":183},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":181,"name":182,"url":183,"logo":185},{"@type":186,"url":187},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":189,"name":6,"description":190,"additionalType":191},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":193,"@id":194},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-6977","Cybersecurity","CVE-2019-6977, CVE-2019-6977 vulnerability, CVE-2019-6977 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[198,205,222,230,242],{"Operator":15,"Negate":15,"Nodes":199},[200],{"Operator":201,"Negate":15,"CPEMatch":202},"OR",[203],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":204,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C257CC1C-BF6A-4125-AA61-9C2D09096084",{"Operator":15,"Negate":15,"Nodes":206},[207],{"Operator":201,"Negate":15,"CPEMatch":208},[209,212,216,220],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":210,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":211,"VersionEndIncluding":15},"95DE8FCE-DE35-4F6B-BF8A-548A7D92E718","5.6.40",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":213,"VersionStartExcluding":15,"VersionStartIncluding":214,"VersionEndExcluding":215,"VersionEndIncluding":15},"761D6FA2-48EF-4A41-AD56-B147405FA66C","7.0.0","7.1.26",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":217,"VersionStartExcluding":15,"VersionStartIncluding":218,"VersionEndExcluding":219,"VersionEndIncluding":15},"36BCA6E4-9A35-4F14-8C12-38F4BBCBF3AF","7.2.0","7.2.14",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":221,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3CB80930-3E0B-4521-8898-C4C8992F7219",{"Operator":15,"Negate":15,"Nodes":223},[224],{"Operator":201,"Negate":15,"CPEMatch":225},[226,228],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":227,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":229,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":15,"Negate":15,"Nodes":231},[232],{"Operator":201,"Negate":15,"CPEMatch":233},[234,236,238,240],{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":235,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":237,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":239,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":241,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"07C312A0-CD2C-4B9C-B064-6409B25C278F",{"Operator":15,"Negate":15,"Nodes":243},[244],{"Operator":201,"Negate":15,"CPEMatch":245},[246],{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":247,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"97234253-2B34-49B8-8498-4F99E2B083F3",[],[250],{"id":251,"eventType":252,"eventTime":253,"details":254,"label":255,"color":256},"9417c3f2-2f02-4047-b0c4-de314955be1f","LOW_EPSS_DELTA","2026-06-16T04:06:00.228279+00:00","Daily EPSS score decreased by 0.228 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":258,"version":33},1792254265198,{"score":260,"band":261,"action":262,"scoredAt":263},61,"Medium","Plan remediation","2026-10-16T06:45:32.184697+00:00"]