Generic HTTP Directory Traversal / File Inclusion (Web Application URL Parameter) - Active Check

Generic check for HTTP directory traversal / file inclusion vulnerabilities within URL parameters of the remote web application. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openSUSE: Security Advisory for php5 (openSUSE-SU-2016:2837-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2016-6911

CVE-2016-6911 : The GD Graphics Library (libgd) has a vulnerability in dynamicGetbuf (pre-2.2.4) that allows an out-of-bounds read when processing crafted TIFF images, leading to potential denial of service. Affected component: libgd’s dynamicGetbuf; impact: DoS via crafted TIFF. The entry is cor...

Updated libgd packages fixe security vulnerabilities

Ibrahim El-Sayed discovered that the GD library incorrectly handled certain malformed Tiff images. If a user or automated system were tricked into processing a specially crafted Tiff image, an attacker could cause a denial of service CVE-2016-6911. Emmanuel Law discovered that the GD library...

Fedora 24 : gd (2016-e45a7e7b13)

Security fix for CVE-2016-8670 - Security fix for CVE-2016-6911 - Security fix for CVE-2016-7568 - For Fedora 26 disabled two tests - they are failing because of freetype 2.7 https://github.com/libgd/libgd/issues/302, https://github.com/libgd/libgd/issues/217 Note that Tenable Network Security...

Fedora Update for gd FEDORA-2016-e45a7e7b13

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : gd (2016-722c0afc64)

Security fix for CVE-2016-8670 - Security fix for CVE-2016-6911 - Security fix for CVE-2016-7568 - For Fedora 26 disabled two tests - they are failing because of freetype 2.7 https://github.com/libgd/libgd/issues/302, https://github.com/libgd/libgd/issues/217 Note that Tenable Network Security...

openSUSE Security Update : php5 (openSUSE-2016-1308)

This update for php5 fixes the following security issues : - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...

openSUSE: Security Advisory for php5 (openSUSE-SU-2016:2831-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ASA-201611-19] php: multiple issues

Arch Linux Security Advisory ASA-201611-19 ========================================== Severity: Critical Date : 2016-11-18 CVE-ID : CVE-2016-6911 CVE-2016-7568 CVE-2016-8670 CVE-2016-9138 Package : php Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary...

openSUSE Security Update : php5 (openSUSE-2016-1321)

This update for php5 fixes the following security issues : - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...

Security update for php5 (important)

This update for php5 fixes the following security issues: - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...

openSUSE Security Update : gd (openSUSE-2016-1281)

This update for gd fixes the following security issues : - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...

Ubuntu: Security Advisory (USN-3117-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2016:2668-1)

This update for gd fixes the following security issues : - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...

SUSE SLES11 Security Update : gd (SUSE-SU-2016:2670-1)

This update for gd fixes the following issues : - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 - CVE-2016-6911: Check for out-of-bound read in dynamicGetbuf bsc1005274 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

Debian DLA-665-1 : libgd2 security update

CVE-2016-6911 invalid read in gdImageCreateFromTiffPtr most of the code is not present in the Wheezy version CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf For Debian 7 'Wheezy', these problems have been fixed in version 2.0.36rc1dfsg-6.1+deb7u6. We recommend that you upgrade your libgd...

[SECURITY] [DLA 665-1] libgd2 security update

Package : libgd2 Version : 2.0.36rc1dfsg-6.1+deb7u6 CVE ID : CVE-2016-6911 CVE-2016-8670 CVE-2016-6911 invalid read in gdImageCreateFromTiffPtr most of the code is not present in the Wheezy version CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf For Debian 7 "Wheezy", these problems have...

DLA-665-1 libgd2 - security update

Bulletin has no description...

Debian DSA-3693-1 : libgd2 - security update

Multiple vulnerabilities have been discovered in the GD Graphics Library, which may result in denial of service or potentially the execution of arbitrary code if a malformed file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...