CVE-2016-9317

Опубликовано: 26 янв. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 7.1

EPSS Низкий

Описание

The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image.

Ссылки

http://www.debian.org/security/2017/dsa-3777
http://www.securityfocus.com/bid/95841
https://github.com/libgd/libgd/blob/gd-2.2.4/CHANGELOG.md
Issue Tracking
Patch
Release Notes
Third Party Advisory
https://github.com/libgd/libgd/commit/1846f48e5fcdde996e7c27a4bbac5d0aef183e4b
Issue Tracking
Patch
Third Party Advisory
http://www.debian.org/security/2017/dsa-3777
http://www.securityfocus.com/bid/95841
https://github.com/libgd/libgd/blob/gd-2.2.4/CHANGELOG.md
Issue Tracking
Patch
Release Notes
Third Party Advisory
https://github.com/libgd/libgd/commit/1846f48e5fcdde996e7c27a4bbac5d0aef183e4b
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libgd:libgd:*:*:*:*:*:*:*:*

Версия до 2.2.3 (включая)

EPSS

Процентиль: 78%

0.01088

Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2016-9317

CVSS3: 5.5

ubuntu

около 9 лет назад

The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image.

CVE-2016-9317

CVSS3: 8.1

redhat

около 9 лет назад

The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image.

CVE-2016-9317

CVSS3: 5.5

debian

около 9 лет назад

The gdImageCreate function in the GD Graphics Library (aka libgd) befo ...

GHSA-7pf6-3qr6-mjfr

CVSS3: 5.5

github

больше 3 лет назад

The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system hang) via an oversized image.

BDU:2017-01606

fstec

около 9 лет назад

Уязвимость функции gdImageCreate графической библиотеки GD Graphics Library, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 78%

0.01088

Низкий

5.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-20