CVE-2016-5767 Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote a...
HighCVSS 8.8
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libgd2(Debian:12) | < 2.0.34~rc1-1 | 2.0.34~rc1-1 |
| debian/libgd2(Debian:13) | < 2.0.34~rc1-1 | 2.0.34~rc1-1 |
| debian/libgd2(Debian:14) | < 2.0.34~rc1-1 | 2.0.34~rc1-1 |
| libgd | <= 2.0.33 | No fix listed |
| alpine/gd(Alpine:v3.4) | < 2.2.2-r0 | 2.2.2-r0 |
References
- Debian Security Tracker CVE-2016-5767 vendor-advisory
- github.com
- openSUSE-SU-2016:1761 vendor-advisory
- SUSE-SU-2016:2013 vendor-advisory
- openSUSE-SU-2016:1922 vendor-advisory
- php.net release-notes
- php.net release-notes
- RHSA-2016:2598 vendor-advisory
- RHSA-2016:2750 vendor-advisory
- [oss-security] 20160623 Re: CVE for PHP 5.5.37 issues mailing-list release-notes
- 91395 vdb-entry
- bugs.php.net
- h20566.www2.hpe.com
- security.alpinelinux.org vendor-advisory