CVE-2016-10167

Опубликовано: 15 мар. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.

Ссылки

http://libgd.github.io/release-2.2.4.html
Release Notes
Vendor Advisory
http://www.debian.org/security/2017/dsa-3777
http://www.openwall.com/lists/oss-security/2017/01/26/1
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/28/6
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/95869
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037659
https://access.redhat.com/errata/RHSA-2017:3221
https://access.redhat.com/errata/RHSA-2018:1296
https://github.com/libgd/libgd/commit/fe9ed49dafa993e3af96b6a5a589efeea9bfb36f
Issue Tracking
Patch
Third Party Advisory
https://www.tenable.com/security/tns-2017-04
http://libgd.github.io/release-2.2.4.html
Release Notes
Vendor Advisory
http://www.debian.org/security/2017/dsa-3777
http://www.openwall.com/lists/oss-security/2017/01/26/1
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/28/6
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/95869
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037659
https://access.redhat.com/errata/RHSA-2017:3221
https://access.redhat.com/errata/RHSA-2018:1296
https://github.com/libgd/libgd/commit/fe9ed49dafa993e3af96b6a5a589efeea9bfb36f
Issue Tracking
Patch
Third Party Advisory
https://www.tenable.com/security/tns-2017-04

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*

Версия до 2.2.3 (включая)

EPSS

Процентиль: 89%

0.03736

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2016-10167

CVSS3: 5.5

ubuntu

больше 9 лет назад

The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.

CVE-2016-10167

CVSS3: 5.3

redhat

почти 10 лет назад

The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.

CVE-2016-10167

CVSS3: 5.5

debian

больше 9 лет назад

The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Li ...

GHSA-v5rm-77g4-wp7f

CVSS3: 5.5

github

около 4 лет назад

The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.

BDU:2017-00762

fstec

больше 9 лет назад

Уязвимость графической библиотеки GD Graphics Library, позволяющая нарушителю оказать неопределенное воздействие

EPSS

Процентиль: 89%

0.03736

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20