NetSight
IP …
high8.8

CVE-2016-5766

Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.…

Impact

Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.

Affected products

VendorProductAffected versions
RedhatOpenshift
Version 2.0
FreebsdFreebsd
Versions 8.3, 8.0, 10.0, 10.1, 8.4, 9.2
RedhatEnterprise Linux
Versions 6.0, 5, 7.0
LibgdLibgd
Version 2.2.2
FedoraprojectFedora
Versions 23, 24, 22
DebianDebian Linux
Version 8.0

Weakness classification

CWE-190

References