Ubuntu 14.04 LTS / 16.04 LTS : GD library vulnerabilities (USN-3213-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3213-1 advisory. Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were...

USN-3213-1: GD library vulnerabilities

Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were tricked into processing a specially crafted image, an attacker could cause a denial of service, or possibly execute arbitrary code. This issue only affected...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. The library does not properly calculate the buffer size, allowing a malicious user to pass a malicious tga file to cause an out-of-bounds array access that can lead to the system crashing...

Fedora 25 : gd (2017-bab5698540)

Version 2.2.4 - 2017-01-18 Security - gdImageCreate doesn't check for oversized images and as such is prone to DoS vulnerabilities. CVE-2016-9317 - double-free in gdImageWebPtr CVE-2016-6912 - potential unsigned underflow in gdinterpolation.c - DOS vulnerability in gdImageCreateFromGd2Ctx Fixed -...

CVE-2016-6906

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...

CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

DEBIAN-CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

Out-of-bounds

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

UBUNTU-CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

SUSE-SU-2016:2303-1 Security update for gd

This update for gd fixes the following issues: CVE-2016-6214: Buffer over-read issue when parsing crafted TGA file bsc991436 CVE-2016-6132: read out-of-bands was found in the parsing of TGA files using libgd bsc987577 CVE-2016-6128: Invalid color index not properly handled bsc991710 CVE-2016-6207...

libgd 'read_image_tga' heap buffer overflow vulnerability

libgd also known as GD Graphics Library or libgd2 is an American software developer Thomas Boutell developed an open source library for dynamic image creation, which supports the creation of charts, graphs and thumbnails and so on. A heap-based buffer overflow vulnerability exists in libgd, which...

CVE-2016-6905

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA image...

openSUSE Security Update : gd (openSUSE-2016-1003)

This update for gd fixes the following issues : - CVE-2016-6214: Buffer over-read issue when parsing crafted TGA file bsc991436 - CVE-2016-6132: read out-of-bands was found in the parsing of TGA files using libgd bsc987577 - CVE-2016-6128: Invalid color index not properly handled bsc991710 -...

CVE-2016-6214

gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

CVE-2016-6214

gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

DEBIAN-CVE-2016-6214

gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...