CVE-2016-6905

Опубликовано: 03 окт. 2016

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.

Ссылки

http://libgd.github.io/release-2.2.3.html
http://lists.opensuse.org/opensuse-updates/2016-08/msg00121.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/08/23/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/91743
Third Party Advisory
VDB Entry
https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03
Issue Tracking
Patch
https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186
Issue Tracking
Patch
https://github.com/libgd/libgd/issues/248
Issue Tracking
Patch
https://github.com/libgd/libgd/pull/251
Issue Tracking
Patch
http://libgd.github.io/release-2.2.3.html
http://lists.opensuse.org/opensuse-updates/2016-08/msg00121.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/08/23/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/91743
Third Party Advisory
VDB Entry
https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03
Issue Tracking
Patch
https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186
Issue Tracking
Patch
https://github.com/libgd/libgd/issues/248
Issue Tracking
Patch
https://github.com/libgd/libgd/pull/251
Issue Tracking
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*

Версия до 2.2.2 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01086

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2016-6905

CVSS3: 6.5

ubuntu

больше 9 лет назад

The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.

CVE-2016-6905

CVSS3: 4

redhat

больше 9 лет назад

The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.

CVE-2016-6905

CVSS3: 6.5

debian

больше 9 лет назад

The read_image_tga function in gd_tga.c in the GD Graphics Library (ak ...

GHSA-6hhv-cvx8-rhvf

CVSS3: 6.5

github

больше 3 лет назад

The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.

openSUSE-SU-2016:2363-1

suse-cvrf

больше 9 лет назад

Security update for gd

EPSS

Процентиль: 78%

0.01086

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125