PT-2016-6779 · Gd+2 · Gd Graphics Library+2

Hannob · Published 2016-07-06 · Updated 2018-10-30 · CVE-2016-6161

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GD Graphics Library (affected versions not specified)

Description The issue concerns a denial of service (out-of-bounds read) that can be triggered by remote attackers through a crafted image. This is due to a problem in the output function within the gd gif out.c file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2016-6161

DLA-563-1

DSA-3619-1

OPENSUSE-SU-2016_2451-1

SUSE-SU-2016:2302-1

SUSE-SU-2016:2303-1

SUSE-SU-2016:2408-1

SUSE-SU-2016:2460-1

SUSE-SU-2016:2460-2

SUSE-SU-2016_2302-1

USN-3030-1

Affected Products

Gd Graphics Library

Suse

Ubuntu

References · 108

• http://ubuntu.com/usn/USN-3030-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2016-6161 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2408-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2460-2 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-6161 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3030-1 · Vendor Advisory
• http://debian.org/security/2016/dsa-3619 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3030-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6161 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-5766 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6161 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3619-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-6161 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-5116 · Vendor Advisory