CVE-2016-8670

🗓️ 02 Nov 2016 14:17:18Reported by redhat.comType

Integer signedness error in dynamicGetbuf function in GD Graphics Library allows remote attackers to cause denial of service or other impact via crafted imagecreatefromstring call

Reporter	Title	Published	Views	Family All 90
IBM Security Bulletins	Security Bulletin: Vulnerabilities in php5 affect IBM Flex System Chassis Management Module (CMM)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple php5 vulnerabilities (CVE-2016-6911, CVE-2016-8670)	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in php5 affect IBM BladeCenter Advanced Management Module (AMM)	14 Apr 202314:32	–	ibm
Tenable Nessus	PHP < 7.1.0 Multiple Vulnerabilities	2 Jan 201700:00	–	nessus
Tenable Nessus	Amazon Linux AMI : php56 (ALAS-2017-787)	27 Jan 201700:00	–	nessus
Tenable Nessus	Debian DLA-665-1 : libgd2 security update	19 Oct 201600:00	–	nessus
Tenable Nessus	Debian DSA-3693-1 : libgd2 - security update	17 Oct 201600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : gd (EulerOS-SA-2017-1045)	1 May 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : gd (EulerOS-SA-2017-1128)	10 Jul 201700:00	–	nessus
Tenable Nessus	Fedora 25 : gd (2016-722c0afc64)	12 Dec 201600:00	–	nessus

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

08 Apr 2020 19:07Current

6.6Medium risk

Vulners AI Score6.6

CVSS 27.5

CVSS 38.1 - 9.8

EPSS0.01746