PT-2016-5357 · Gd+2 · Gd Graphics Library+2

Hans Jerry Illikainen · Publicado 2016-04-24 · Atualizado 2022-07-20 · CVE-2016-3074

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GD Graphics Library version 2.1.1

Description The issue is related to an integer signedness error that can be triggered by crafted compressed gd2 data, potentially leading to a denial of service or arbitrary code execution due to a heap-based buffer overflow.

Recommendations For GD Graphics Library version 2.1.1, update to a version that fixes the integer signedness error to prevent potential exploitation.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-681

Identificadores relacionados

CVE-2016-3074

DSA-3556-1

DSA-3602-1

MGASA-2016-0152

OPENSUSE-SU-2016_1274-1

OPENSUSE-SU-2016_1553-1

RHSA-2016:2750

USN-2987-1

Produtos afetados

Gd Graphics Library

Suse

Ubuntu

Referências · 39

• 🔥 http://seclists.org/fulldisclosure/2016/Apr/72 · Exploit
• 🔥 http://packetstormsecurity.com/files/136757/libgd-2.1.1-Signedness.html · Exploit
• 🔥 https://exploit-db.com/exploits/39736 · Exploit
• https://github.com/libgd/libgd/commit/2bb97f407c1145c850416a3bfbcc8cf124e68a19 · Correção
• https://ubuntu.com/security/notices/USN-2987-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2014-9709 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-3556-1 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-3602-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2016-0152 · Aviso do Fabricante
• http://debian.org/security/2016/dsa-3556 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2016-0152.html · Nota de Segurança
• https://ubuntu.com/security/CVE-2015-8874 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALPINE-CVE-2016-3074 · Aviso do Fabricante
• http://securityfocus.com/archive/1/538160/100/0/threaded · Nota