PT-2016-3376 · Gd+3 · Gd Graphics Library+3

Trylab · Published 2016-09-28 · Updated 2019-03-07 · CVE-2016-7568

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GD Graphics Library versions through 2.2.3 PHP versions through 7.0.11

Description The issue is caused by an integer overflow in the gdImageWebpCtx function, which can lead to a denial of service or possibly other impacts. This can be triggered by crafted imagewebp and imagedestroy calls, allowing remote attackers to exploit the weakness.

Recommendations For GD Graphics Library versions through 2.2.3, update to a version later than 2.2.3 to resolve the issue. For PHP versions through 7.0.11, update to a version later than 7.0.11 to resolve the issue. As a temporary workaround, consider restricting the use of the imagewebp and imagedestroy functions until a patch is available.

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2022-02406

CVE-2016-7568

DSA-3693-1

MGASA-2016-0339

OPENSUSE-SU-2016_2606-1

OPENSUSE-SU-2016_2607-1

OPENSUSE-SU-2016_2772-1

OPENSUSE-SU-2016_2831-1

OPENSUSE-SU-2016_2837-1

SUSE-SU-2016:2668-1

SUSE-SU-2016:2683-1

SUSE-SU-2016:2683-2

SUSE-SU-2016:2766-1

USN-3117-1

Affected Products

Gd Graphics Library

Php

Suse

Ubuntu

References · 40

• https://github.com/php/php-src/commit/c18263e0e0769faee96a5d0ee04b750c442783c6 · Patch
• https://github.com/libgd/libgd/issues/308 · Patch
• https://github.com/libgd/libgd/commit/40bec0f38f50e8510f5bb71a82f516d46facde03 · Patch
• https://bugs.php.net/bug.php?id=73003 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7568 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2683-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3117-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2683-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-7568 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2016-7568 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-7568 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2766-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-7568 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3117-1 · Vendor Advisory
• https://security.gentoo.org/glsa/201612-09 · Vendor Advisory