Buffer overflow in libgd - CVE-2016-6207
Published: August 12, 2016 / Updated: July 28, 2020
Vulnerability identifier: #VU32249
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-6207
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.
Affected software
libgd
Gentoo Linux
Slackware Linux
Fedora
gd (Alpine package)
gd
Gentoo Linux
Slackware Linux
Fedora
gd (Alpine package)
gd
How to mitigate CVE-2016-6207
Install update from vendor's website.
libgd - update to 2.2.3
gd (Alpine package) - update to 2.2.3-r0
gd - addressed in versions 2.1.1-10.fc23, 2.2.3-1.fc24
gd (Alpine package) - update to 2.2.3-r0
gd - addressed in versions 2.1.1-10.fc23, 2.2.3-1.fc24
External References
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html
- http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html
- http://packetstormsecurity.com/files/138174/LibGD-2.2.2-Integer-Overflow-Denial-Of-Service.html
- http://rhn.redhat.com/errata/RHSA-2016-2750.html
- http://www.debian.org/security/2016/dsa-3630
- http://www.securityfocus.com/archive/1/539100/100/0/threaded
- http://www.securityfocus.com/bid/92080
- http://www.securitytracker.com/id/1036535
- http://www.ubuntu.com/usn/USN-3060-1
- https://bugs.php.net/bug.php?id=72558
- https://libgd.github.io/release-2.2.3.html
- https://secunia.com/secunia_research/2016-9/
- https://security.gentoo.org/glsa/201612-09