Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-6912

Опубликовано: 26 янв. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.5
CVSS3: 9.8

Описание

Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.

РелизСтатусПримечание
devel

not-affected

2.2.4-2
esm-infra-legacy/trusty

released

2.1.0-3ubuntu0.6
esm-infra/xenial

released

2.1.1-4ubuntu0.16.04.6
precise

not-affected

code not present
trusty

released

2.1.0-3ubuntu0.6
trusty/esm

released

2.1.0-3ubuntu0.6
upstream

released

2.2.4-1
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

released

2.1.1-4ubuntu0.16.04.6

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

not-affected

uses system gd
precise

not-affected

uses system gd
trusty

not-affected

uses system gd
trusty/esm

not-affected

uses system gd
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

uses system gd
esm-infra-legacy/trusty

DNE

esm-infra/xenial

not-affected

uses system gd
precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

not-affected

uses system gd

Показывать по

EPSS

Процентиль: 75%
0.00883
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 8.1
redhat
больше 9 лет назад

Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.

CVSS3: 9.8
nvd
около 9 лет назад

Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.

CVSS3: 9.8
debian
около 9 лет назад

Double free vulnerability in the gdImageWebPtr function in the GD Grap ...

CVSS3: 9.8
github
больше 3 лет назад

Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.

fstec
около 9 лет назад

Уязвимость функции gdImageWebPtr графической библиотеки GD Graphics Library, позволяющая нарушителю оказать неопределенное воздействие

EPSS

Процентиль: 75%
0.00883
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3