CVEvulnerability
CVE-2016-9933
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-01-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value.
Affected configurations
• libgd libgd 2.2.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00002.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html lists.opensuse.org
- http://www.debian.org/security/2017/dsa-3751 www.debian.org
- http://www.openwall.com/lists/oss-security/2016/12/12/2 Third Party Advisory
- http://www.php.net/ChangeLog-5.php Release Notes, Vendor Advisory
- http://www.php.net/ChangeLog-7.php Release Notes, Vendor Advisory
- http://www.securityfocus.com/bid/94865 www.securityfocus.com
- https://access.redhat.com/errata/RHSA-2018:1296 access.redhat.com
- https://bugs.php.net/bug.php?id=72696 Vendor Advisory
- https://github.com/libgd/libgd/commit/77f619d48259383628c3ec4654b1ad578e9eb40e Patch, Vendor Advisory
- https://github.com/libgd/libgd/issues/215 Vendor Advisory
- https://github.com/php/php-src/commit/863d37ea66d5c960db08d6f4a2cbd2518f0f80d1 Vendor Advisory
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00002.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html lists.opensuse.org
- http://www.debian.org/security/2017/dsa-3751 www.debian.org
- http://www.openwall.com/lists/oss-security/2016/12/12/2 Third Party Advisory
- http://www.php.net/ChangeLog-5.php Release Notes, Vendor Advisory
- http://www.php.net/ChangeLog-7.php Release Notes, Vendor Advisory
- http://www.securityfocus.com/bid/94865 www.securityfocus.com
- https://access.redhat.com/errata/RHSA-2018:1296 access.redhat.com
- https://bugs.php.net/bug.php?id=72696 Vendor Advisory
- https://github.com/libgd/libgd/commit/77f619d48259383628c3ec4654b1ad578e9eb40e Patch, Vendor Advisory
- https://github.com/libgd/libgd/issues/215 Vendor Advisory
- https://github.com/php/php-src/commit/863d37ea66d5c960db08d6f4a2cbd2518f0f80d1 Vendor Advisory