CVE

Id
92948  
CVE No.
CVE-2016-6128  
Status
Candidate  
Description
The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application crash) via an invalid color index.  
Phase
Assigned (20160629)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
791874 92948 CVE-2016-6128 MLIST:[oss-security] 20160629 Re: CVE Request: libgd: Invalid color index is not properly handled leading to denial of service (crash)  View
791875 92948 CVE-2016-6128 URL:http://www.openwall.com/lists/oss-security/2016/06/30/1  View
791876 92948 CVE-2016-6128 CONFIRM:https://bugs.php.net/72494  View
791877 92948 CVE-2016-6128 CONFIRM:https://github.com/libgd/libgd/commit/1ccfe21e14c4d18336f9da8515cd17db88c3de61  View
791878 92948 CVE-2016-6128 CONFIRM:https://github.com/libgd/libgd/commit/6ff72ae40c7c20ece939afb362d98cc37f4a1c96  View
791879 92948 CVE-2016-6128 CONFIRM:https://libgd.github.io/release-2.2.3.html  View
791880 92948 CVE-2016-6128 DEBIAN:DSA-3619  View
791881 92948 CVE-2016-6128 URL:http://www.debian.org/security/2016/dsa-3619  View
791882 92948 CVE-2016-6128 SUSE:openSUSE-SU-2016:2363  View
791883 92948 CVE-2016-6128 URL:http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html  View
791884 92948 CVE-2016-6128 SUSE:openSUSE-SU-2016:2117  View
791885 92948 CVE-2016-6128 URL:http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html  View
791886 92948 CVE-2016-6128 UBUNTU:USN-3030-1  View
791887 92948 CVE-2016-6128 URL:http://www.ubuntu.com/usn/USN-3030-1  View
791888 92948 CVE-2016-6128 BID:91509  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4957 JVNDB-2016-005730 Cisco ASR 900 シリーズルータの IOS XE の TL1 コードにおけるリロードを引き起こされる脆弱性 Cisco ASR 900 シリーズアグリゲーションサービスルータ ASR902、ASR903、および ASR907 の IOS XE のトランザクション言語 1 (TL1) コードには、リロードを引き起こされる、またはリモートでコードを実行される脆弱性が存在します。 CVE-2016-6441 92948 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005730.html  View