UBUNTU-CVE-2016-9933

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library aka libgd before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service segmentation violation via a crafted imagefilltoborder call that...

openSUSE Security Update : gd (openSUSE-2017-3)

This update for gd fixes the following issues : - CVE-2016-9933 possible stackoverflow on malicious truecolor images bsc1015187 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2016-6906

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...

CVE-2016-10167

The gdImageCreateFromGd2Ctx function in gdgd2.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service application crash via a crafted image file...

CVE-2016-10168

Integer overflow in gdio.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image...

CVE-2016-10166

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

UBUNTU-CVE-2016-10166

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

openSUSE Security Update : gd (openSUSE-2016-1510)

This security update for gd fixes the following issues : - a call to gdImageFillToBorder could cause a stack overflow leading to stack exhaustion when the image used was not truecolor CVE-2016-9933 ,boo1015187 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SUSE SLES11 Security Update : gd (SUSE-SU-2016:3251-1)

This update for gd fixes the following issues : - CVE-2016-9933 possible stackoverflow on malicious truecolor images bsc1015187 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean a...

SUSE-SU-2016:3251-1 Security update for gd

This update for gd fixes the following issues: CVE-2016-9933 possible stackoverflow on malicious truecolor images bsc1015187...

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2016:3211-1)

This update for gd fixes the following issues : - CVE-2016-9933 possible stackoverflow on malicious truecolor images bsc1015187 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean a...

SUSE-SU-2016:3211-1 Security update for gd

This update for gd fixes the following issues: CVE-2016-9933 possible stackoverflow on malicious truecolor images bsc1015187...

Fedora 24 : gd (2016-e45a7e7b13)

Security fix for CVE-2016-8670 - Security fix for CVE-2016-6911 - Security fix for CVE-2016-7568 - For Fedora 26 disabled two tests - they are failing because of freetype 2.7 https://github.com/libgd/libgd/issues/302, https://github.com/libgd/libgd/issues/217 Note that Tenable Network Security...

USN-3117-1: GD library vulnerabilities | Cloud Foundry

USN-3117-1: GD library vulnerabilities Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 LTS Description The GD library could be made to crash or run programs if it processed a specially crafted image file. Software description: libgd2 – GD Graphics Library Ibrahim El-Sayed...

Fedora Update for gd FEDORA-2016-e45a7e7b13

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 24 Update: gd-2.2.3-5.fc24

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...

PHP 'src/gd.c' Denial of Service Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

Scientific Linux Security Update : php on SL7.x x86_64 (20161103)

Security Fixes : - A flaw was found in the way certain error conditions were handled by bzread function in PHP. An attacker could use this flaw to upload a specially crafted bz2 archive which, when parsed via the vulnerable function, could cause the application to crash or execute arbitrary code...

CVE-2016-9933

An infinite recursion flaw was found in the gdImageFillToBorder function from the gd library; also used by PHP imagefilltoborder function, when passing a negative integer as the color parameter, triggering a stack overflow. A remote attacker with ability to force a negative color identifier when...

Fedora 25 : gd (2016-722c0afc64)

Security fix for CVE-2016-8670 - Security fix for CVE-2016-6911 - Security fix for CVE-2016-7568 - For Fedora 26 disabled two tests - they are failing because of freetype 2.7 https://github.com/libgd/libgd/issues/302, https://github.com/libgd/libgd/issues/217 Note that Tenable Network Security...