Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-8877

Опубликовано: 22 мая 2016
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*
Версия до 2.1.1 (включая)
Конфигурация 2
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия до 5.6.11 (включая)

EPSS

Процентиль: 84%
0.0231
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 9 лет назад

The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.

redhat
почти 10 лет назад

The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.

CVSS3: 7.5
debian
около 9 лет назад

The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graph ...

CVSS3: 7.5
github
около 3 лет назад

The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.

fstec
около 9 лет назад

Уязвимость интерпретатора PHP, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 84%
0.0231
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-399