Lucene search
+L

1456 matches found

CNVD
CNVD
•added 2016/05/23 12:00 a.m.•17 views

PHP GD Graphics Library Denial of Service Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntax , support for multiple databases and operating systems and support for C, C++ for program extensions , etc...

7.5CVSS8.2AI score0.03647EPSS
SaveExploits1References1
OSV
OSV
•added 2016/05/22 1:59 a.m.•26 views

CVE-2015-8877

The gdImageScaleTwoPass function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated ...

7.5CVSS8AI score
SaveExploits0References7
NVD
NVD
•added 2016/05/22 1:59 a.m.•44 views

CVE-2015-8877

The gdImageScaleTwoPass function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated ...

7.5CVSS7.3AI score0.03647EPSS
SaveExploits1References7
OSV
OSV
•added 2016/05/22 1:59 a.m.•12 views

DEBIAN-CVE-2015-8877

The gdImageScaleTwoPass function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated ...

7.5CVSS6.9AI score0.03647EPSS
SaveExploits1References1
Prion
Prion
•added 2016/05/22 1:59 a.m.•33 views

Design/Logic Flaw

The gdImageScaleTwoPass function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated ...

5CVSS6.9AI score0.03647EPSS
SaveExploits1References7Affected Software2
Mend
Mend
•added 2016/05/22 1:00 a.m.•1 views

CVE-2015-8877

The gdImageScaleTwoPass function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated ...

8.7CVSS0.03647EPSS
SaveExploits1References9
Debian CVE
Debian CVE
•added 2016/05/22 1:00 a.m.•83 views

CVE-2015-8877

The gdImageScaleTwoPass function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated ...

7.5CVSS7.7AI score0.03647EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/05/22 12:00 a.m.•4 views

CVE-2015-8877: Undefined Security Weakness

The gdImageScaleTwoPass function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated ...

7.5CVSS7.4AI score0.03647EPSS
SaveExploits1References2
OSV
OSV
•added 2016/05/21 12:00 a.m.•12 views

UBUNTU-CVE-2015-8877

The gdImageScaleTwoPass function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated ...

7.5CVSS7.2AI score0.03647EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2016/05/21 12:00 a.m.•3 views

PT-2016-2120

Name of the Vulnerable Software and Affected Versions GD Graphics Library versions prior to 2.2.0 PHP versions prior to 5.6.12 Description The issue is related to the gdImageScaleTwoPass function in the GD Graphics Library, which uses inconsistent memory allocation and deallocation approaches. Th...

7.5CVSS0.03647EPSS
SaveExploits1References46
Fedora
Fedora
•added 2016/05/16 2:58 p.m.•43 views

[SECURITY] Fedora 22 Update: gd-2.1.1-3.fc22

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...

9.8CVSS2.8AI score0.37226EPSS
SaveExploits8
OSV
OSV
•added 2016/05/16 10:59 a.m.•9 views

DEBIAN-CVE-2015-8874

Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder call...

7.5CVSS8.1AI score0.08607EPSS
SaveExploits1References1
Fedora
Fedora
•added 2016/05/07 12:28 p.m.•41 views

[SECURITY] Fedora 24 Update: gd-2.1.1-7.fc24

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...

9.8CVSS2.8AI score0.37226EPSS
SaveExploits8
Tenable Nessus
Tenable Nessus
•added 2016/05/05 12:00 a.m.•145 views

PHP 5.5.x < 5.5.35 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.5.x prior to 5.5.35. It is, therefore, affected by multiple vulnerabilities : - A signedness error exists in the GD Graphics library within file gdgd2.c due to improper validation of user-supplied input when handlin...

9.8CVSS8.6AI score0.37226EPSS
SaveExploits16References10
Tenable Nessus
Tenable Nessus
•added 2016/05/05 12:00 a.m.•149 views

PHP 5.6.x < 5.6.21 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.21. It is, therefore, affected by multiple vulnerabilities : - A signedness error exists in the GD Graphics library within file gdgd2.c due to improper validation of user-supplied input when handlin...

9.8CVSS8.6AI score0.37226EPSS
SaveExploits16References10
Fedora
Fedora
•added 2016/04/30 12:27 a.m.•54 views

[SECURITY] Fedora 23 Update: gd-2.1.1-5.fc23

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...

9.8CVSS2.8AI score0.37226EPSS
SaveExploits8
NVD
NVD
•added 2016/04/26 2:59 p.m.•26 views

CVE-2016-3074

Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...

9.8CVSS9.7AI score0.37226EPSS
SaveExploits8References18
OSV
OSV
•added 2016/04/26 2:59 p.m.•9 views

DEBIAN-CVE-2016-3074

Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...

9.8CVSS8.1AI score0.37226EPSS
SaveExploits8References1
OSV
OSV
•added 2016/04/26 2:59 p.m.•32 views

CVE-2016-3074

Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...

9.8CVSS7.9AI score
SaveExploits0References18
OSV
OSV
•added 2016/04/26 2:59 p.m.•10 views

ALPINE-CVE-2016-3074

Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...

9.8CVSS8.1AI score0.37226EPSS
SaveExploits8References1
Rows per page
Query Builder