Published: 12/08/2016 Updated: 29/08/2022

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) prior to 2.2.3 allows remote malicious users to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libgd libgd
debian debian linux 8.0
opensuse leap 42.1
php php

Synopsis Moderate: rh-php56 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for rh-php56, rh-php56-php, and rh-php56-php-pear is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Mo ...

The GD library could be made to crash or run programs if it processed a specially crafted image file ...

Secunia Research at Flexera Software discovered an integer overflow vulnerability within the _gdContributionsAlloc() function in libgd2, a library for programmatic graphics creation and manipulation A remote attacker can take advantage of this flaw to cause a denial-of-service against an application using the libgd2 library For the stable distrib ...

Integer overflow in the _gdContributionsAlloc function in gd_interpolationc in GD Graphics Library (aka libgd) before 223 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors ...

CWE-119 CWE-787 CWE-190 https://secunia.com/secunia_research/2016-9/https://libgd.github.io/release-2.2.3.html http://packetstormsecurity.com/files/138174/LibGD-2.2.2-Integer-Overflow-Denial-Of-Service.html http://www.securitytracker.com/id/1036535 http://www.debian.org/security/2016/dsa-3630 https://bugs.php.net/bug.php?id=72558 http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html http://www.ubuntu.com/usn/USN-3060-1 http://www.securityfocus.com/bid/92080 https://security.gentoo.org/glsa/201612-09 http://rhn.redhat.com/errata/RHSA-2016-2750.html http://www.securityfocus.com/archive/1/539100/100/0/threaded https://access.redhat.com/errata/RHSA-2016:2750 https://usn.ubuntu.com/3060-1/https://nvd.nist.gov

CVE-2016-6207

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect