CVE

Id
93946  
CVE No.
CVE-2016-7126  
Status
Candidate  
Description
The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate the number of colors, which allows remote attackers to cause a denial of service (select_colors allocation error and out-of-bounds write) or possibly have unspecified other impact via a large value in the third argument.  
Phase
Assigned (20160902)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794922 93946 CVE-2016-7126 MLIST:[oss-security] 20160902 Re: CVE assignment for PHP 5.6.25 and 7.0.10 - and libcurl  View
794923 93946 CVE-2016-7126 URL:http://openwall.com/lists/oss-security/2016/09/02/9  View
794924 93946 CVE-2016-7126 CONFIRM:http://www.php.net/ChangeLog-5.php  View
794925 93946 CVE-2016-7126 CONFIRM:http://www.php.net/ChangeLog-7.php  View
794926 93946 CVE-2016-7126 CONFIRM:https://bugs.php.net/bug.php?id=72697  View
794927 93946 CVE-2016-7126 CONFIRM:https://github.com/php/php-src/commit/b6f13a5ef9d6280cf984826a5de012a32c396cd4?w=1  View
794928 93946 CVE-2016-7126 BID:92755  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64600 JVNDB-2016-006375 wolfSSL の RSA の C ソフトウェアの実装における RSA 鍵を取得される脆弱性 wolfSSL (旧 CyaSSL) の RSA の C ソフトウェアの実装には、RSA 鍵を取得される脆弱性が存在します。 CVE-2016-7439 93946 2.1 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006375.html  View