PT-2016-7160 · Libgd+1 · Gd Graphics Library+1

Ke Liu · Publicado 2016-07-15 · Atualizado 2024-06-15 · CVE-2016-6905

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GD Graphics Library (aka libgd) versions prior to 2.2.3

Description The issue allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image. This is due to a problem in the read image tga function in gd tga.c.

Recommendations For versions prior to 2.2.3, update to version 2.2.3 or later to resolve the issue. As a temporary workaround, consider restricting the processing of TGA images until a patch is applied.

Correção

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2016-6905

DSA-3619-1

OPENSUSE-SU-2024:10062-1

SUSE-SU-2016:2303-1

USN-3060-1

Produtos afetados

Gd Graphics Library

Suse

Referências · 55

• https://github.com/libgd/libgd/issues/248 · Correção
• https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03 · Correção
• https://github.com/libgd/libgd/pull/251 · Correção
• https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186 · Correção
• https://suse.com/support/update/announcement/2016/suse-su-20162303-1 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10062-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-6905 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-6207 · Nota
• https://security-tracker.debian.org/tracker/DSA-3619-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/libgd2 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-6132 · Nota
• https://packages.debian.org/src:libgd2 · Nota
• https://bugzilla.suse.com/987577 · Nota
• https://bugzilla.suse.com/991622 · Nota
• https://suse.com/security/cve/CVE-2016-5116 · Nota