CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

CVE-2016-9933

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library aka libgd before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service segmentation violation via a crafted imagefilltoborder call that...

EUVD-2016-10720

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library aka libgd before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service segmentation violation via a crafted imagefilltoborder call that...

CVE-2016-9933

CVE-2016-9933 is a stack consumption denial-of-service vulnerability in the GD Graphics Library (libgd) within gdImageFillToBorder (gd.c) that affects PHP builds using libgd prior to 2.2.2. Exploitation occurs via crafted imagefilltoborder calls that trigger a negative color value. Public referen...

CVE-2016-9933

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library aka libgd before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service segmentation violation via a crafted imagefilltoborder call that...

CVE-2016-9933

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library aka libgd before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service segmentation violation via a crafted imagefilltoborder call that...

UBUNTU-CVE-2016-9933

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library aka libgd before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service segmentation violation via a crafted imagefilltoborder call that...

openSUSE Security Update : gd (openSUSE-2017-3)

This update for gd fixes the following issues : - CVE-2016-9933 possible stackoverflow on malicious truecolor images bsc1015187 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2016-6906

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...

CVE-2016-10168

Integer overflow in gdio.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image...

CVE-2016-10167

The gdImageCreateFromGd2Ctx function in gdgd2.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service application crash via a crafted image file...

CVE-2016-10166

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

UBUNTU-CVE-2016-10166

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

openSUSE Security Update : gd (openSUSE-2016-1510)

This security update for gd fixes the following issues : - a call to gdImageFillToBorder could cause a stack overflow leading to stack exhaustion when the image used was not truecolor CVE-2016-9933 ,boo1015187 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SUSE SLES11 Security Update : gd (SUSE-SU-2016:3251-1)

This update for gd fixes the following issues : - CVE-2016-9933 possible stackoverflow on malicious truecolor images bsc1015187 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean a...

SUSE-SU-2016:3251-1 Security update for gd

This update for gd fixes the following issues: CVE-2016-9933 possible stackoverflow on malicious truecolor images bsc1015187...

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2016:3211-1)

This update for gd fixes the following issues : - CVE-2016-9933 possible stackoverflow on malicious truecolor images bsc1015187 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean a...

SUSE-SU-2016:3211-1 Security update for gd

This update for gd fixes the following issues: CVE-2016-9933 possible stackoverflow on malicious truecolor images bsc1015187...

Fedora 24 : gd (2016-e45a7e7b13)

Security fix for CVE-2016-8670 - Security fix for CVE-2016-6911 - Security fix for CVE-2016-7568 - For Fedora 26 disabled two tests - they are failing because of freetype 2.7 https://github.com/libgd/libgd/issues/302, https://github.com/libgd/libgd/issues/217 Note that Tenable Network Security...

USN-3117-1: GD library vulnerabilities | Cloud Foundry

USN-3117-1: GD library vulnerabilities Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 LTS Description The GD library could be made to crash or run programs if it processed a specially crafted image file. Software description: libgd2 – GD Graphics Library Ibrahim El-Sayed...