CVE-2016-9933
At a glance
- Source
- NVD
- EPSS
- EPSS 6.87 % · percentile 94 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- mitre
- NVD status
- Modified
Description
Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value.
Weaknesses (CWE)
- CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer
References
- http://www.openwall.com/lists/oss-security/2016/12/12/2
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.html
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html
- http://www.php.net/ChangeLog-7.php
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00002.html
- https://github.com/php/php-src/commit/863d37ea66d5c960db08d6f4a2cbd2518f0f80d1
- http://www.debian.org/security/2017/dsa-3751
- http://www.securityfocus.com/bid/94865
- https://access.redhat.com/errata/RHSA-2018:1296
- http://www.php.net/ChangeLog-5.php
- https://bugs.php.net/bug.php?id=72696
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html
- https://github.com/libgd/libgd/issues/215
- https://github.com/libgd/libgd/commit/77f619d48259383628c3ec4654b1ad578e9eb40e
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.0 | HIGH 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2016-10720
- GCVE · GCVE-0-2016-9933
CERT-FR advisories
- CERTFR-2017-AVI-237 — Multiples vulnérabilités dans Fortinet FortiOS et FortiAnalyzer · cert.ssi.gouv.fr
- CERTFR-2017-AVI-028 — Multiples vulnérabilités dans les produits Apple · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:libgd:libgd:2.2.1:*:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| affected n/a |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |