CVE-2017-6362: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 5.1% chance of exploitation in the next 30 days.

Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors.

Affected products

• Canonical Ubuntu Linux: version 16.04 only
• Debian Debian Linux: version 8.0 only; version 9.0 only
• Fedoraproject Fedora: version 26 only
• Libgd Libgd: version 2.2.4 only

Published 2017-09-07. Last modified 2026-06-17.