CVE-2016-6207 Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory....
MediumCVSS 6.5
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libgd2(Debian:12) | < 2.2.2-43-g22cba39-1 | 2.2.2-43-g22cba39-1 |
| debian/libgd2(Debian:13) | < 2.2.2-43-g22cba39-1 | 2.2.2-43-g22cba39-1 |
| debian/libgd2(Debian:14) | < 2.2.2-43-g22cba39-1 | 2.2.2-43-g22cba39-1 |
| libgd | <= 2.2.2 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| PHP | >= 5.5.0, < 5.5.38 | 5.5.38 |
| PHP | >= 5.6.0, < 5.6.24 | 5.6.24 |
| PHP | >= 7.0.0, < 7.0.9 | 7.0.9 |
| alpine/gd(Alpine:v3.4) | < 2.2.3-r0 | 2.2.3-r0 |
References
- Debian Security Tracker CVE-2016-6207 vendor-advisory
- openSUSE-SU-2016:2117 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:2363 mailing-list third-party-advisory vendor-advisory
- packetstormsecurity.com third-party-advisory vdb-entry
- RHSA-2016:2750 third-party-advisory vendor-advisory
- DSA-3630 third-party-advisory vendor-advisory
- 20160803 Secunia Research: LibGD "_gdContributionsAlloc()" Integer Overflow Denial of Service Vulnerability mailing-list third-party-advisory vdb-entry
- 92080 third-party-advisory vdb-entry
- 1036535 patch third-party-advisory vdb-entry
- USN-3060-1 mailing-list third-party-advisory vendor-advisory
- bugs.php.net issue-tracking vendor-advisory
- libgd.github.io vendor-advisory
- secunia.com third-party-advisory vdb-entry
- GLSA-201612-09 third-party-advisory vendor-advisory
- security.alpinelinux.org vendor-advisory