Lucene search
+L

1945 matches found

OSV
OSV
added 2017/03/15 2:59 p.m.3 views

DEBIAN-CVE-2016-6906

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...

5.5CVSS6.6AI score0.01977EPSS
SaveExploits0References1
CVE
CVE
added 2017/03/15 2:0 p.m.103 views

CVE-2016-6906

CVE-2016-6906 affects the GD Graphics Library (libgd) read_image_tga in gd_tga.c, vulnerable before 2.2.4 due to an out-of-bounds read in the TGA decompression buffer when processing crafted images. This can cause denial of service; potential for remote impact is indicated in related advisories, ...

5.5CVSS6.6AI score0.01977EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2017/03/15 2:0 p.m.34 views

CVE-2016-6906

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...

6.8AI score0.01977EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2017/03/15 2:0 p.m.45 views

CVE-2016-6906

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...

5.5CVSS7AI score0.01977EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2017/03/15 2:0 p.m.50 views

CVE-2016-6906

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...

5.5CVSS7AI score0.01977EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2017/03/01 12:0 a.m.60 views

Ubuntu 14.04 LTS / 16.04 LTS : GD library vulnerabilities (USN-3213-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3213-1 advisory. Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were...

9.8CVSS7.3AI score0.10687EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2017/03/01 12:0 a.m.42 views

Ubuntu: Security Advisory (USN-3213-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.2AI score0.10687EPSS
SaveExploits0References2
OSV
OSV
added 2017/02/28 6:31 p.m.4 views

USN-3213-1 libgd2 vulnerabilities

Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were tricked into processing a specially crafted image, an attacker could cause a denial of service, or possibly execute arbitrary code. This issue only affected...

9.8CVSS7AI score0.10687EPSS
SaveExploits0References8
Ubuntu
Ubuntu
added 2017/02/28 6:31 p.m.234 views

USN-3213-1: GD library vulnerabilities

Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were tricked into processing a specially crafted image, an attacker could cause a denial of service, or possibly execute arbitrary code. This issue only affected...

9.8CVSS7.2AI score0.10687EPSS
SaveExploits0
WPVulnDB
WPVulnDB
added 2017/02/24 12:0 a.m.20 views

GD Rating System < 2.1 - XSS

The GD Rating System WordPress plugin was affected by a XSS security vulnerability...

4.3CVSS2.2AI score0.00905EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/02/24 12:0 a.m.35 views

openSUSE Security Update : gd (openSUSE-2017-289)

This update for gd fixes the following security issues : - CVE-2016-6906: An out-of-bounds read in TGA decompression was fixed which could have lead to crashes. bsc1022553 - CVE-2016-6912: Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library aka libgd allowed remote...

9.8CVSS6.8AI score0.10687EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2017/02/16 12:0 a.m.63 views

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2017:0468-1)

This update for gd fixes the following security issues : - CVE-2016-6906: An out-of-bounds read in TGA decompression was fixed which could have lead to crashes. bsc1022553 - CVE-2016-6912: Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library aka libgd allowed remote...

9.8CVSS6.9AI score0.10687EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
added 2017/02/15 12:0 a.m.29 views

SUSE SLES11 Security Update : gd (SUSE-SU-2017:0459-1)

This update for gd fixes the following security issues : - CVE-2016-9317: The gdImageCreate function in the GD Graphics Library aka libgd allowed remote attackers to cause a denial of service system hang via an oversized image. bsc1022283 - CVE-2016-10167: A denial of service problem in...

7.8CVSS6.8AI score0.03736EPSS
SaveExploits0References10
OSV
OSV
added 2017/02/14 1:8 p.m.10 views

SUSE-SU-2017:0459-1 Security update for gd

This update for gd fixes the following security issues: - CVE-2016-9317: The gdImageCreate function in the GD Graphics Library aka libgd allowed remote attackers to cause a denial of service system hang via an oversized image. bsc1022283 - CVE-2016-10167: A denial of service problem in...

7.8CVSS7.6AI score0.03736EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2017/01/31 2:49 p.m.42 views

CVE-2016-6912

Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via large width and height values...

9.8CVSS6.2AI score0.04449EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2017/01/31 2:48 p.m.33 views

CVE-2016-9317

The gdImageCreate function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service system hang via an oversized image...

8.1CVSS5.4AI score0.03581EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2017/01/27 12:0 a.m.53 views

Amazon Linux AMI : php56 (ALAS-2017-787)

A vulnerability was found in gd. Integer underflow in a calculation in dynamicGetbuf was incorrectly handled, leading in some circumstances to an out of bounds write through a very large argument to memcpy. An attacker could create a crafted image that would lead to a crash or, potentially, code...

9.8CVSS8.3AI score0.07031EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2017/01/27 12:0 a.m.315 views

Amazon Linux AMI : php70 (ALAS-2017-788)

The SplObjectStorage unserialize implementation in ext/spl/splobserver.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute arbitrary code or cause a denial of service uninitialized memory access via crafted serialized data. CVE-2016-7480...

9.8CVSS8.9AI score0.46801EPSS
SaveExploits10References7
Prion
Prion
added 2017/01/26 3:59 p.m.27 views

Design/Logic Flaw

The gdImageCreate function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service system hang via an oversized image...

7.1CVSS6.9AI score0.03581EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2017/01/26 3:59 p.m.23 views

CVE-2016-6912

Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via large width and height values...

9.8CVSS9.8AI score0.04449EPSS
SaveExploits0References4
Rows per page
Query Builder