Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-5116

Опубликовано: 29 мая 2016
Источник: redhat
CVSS2: 4.3
EPSS Низкий

Описание

gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5gdNot affected
Red Hat Enterprise Linux 6gdNot affected
Red Hat Enterprise Linux 7gdNot affected
Red Hat OpenShift Enterprise 2gdNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=1340856gd: Information leak due to stack overflow in gdCtxPrintf

EPSS

Процентиль: 85%
0.02731
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 9.1
ubuntu
почти 9 лет назад

gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name.

CVSS3: 9.1
nvd
почти 9 лет назад

gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name.

CVSS3: 9.1
debian
почти 9 лет назад

gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used ...

CVSS3: 9.1
github
около 3 лет назад

gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name.

suse-cvrf
почти 9 лет назад

Security update for gd

EPSS

Процентиль: 85%
0.02731
Низкий

4.3 Medium

CVSS2