CVE

Id
93947  
CVE No.
CVE-2016-7127  
Status
Candidate  
Description
The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by providing different signs for the second and third arguments.  
Phase
Assigned (20160902)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794929 93947 CVE-2016-7127 MLIST:[oss-security] 20160902 Re: CVE assignment for PHP 5.6.25 and 7.0.10 - and libcurl  View
794930 93947 CVE-2016-7127 URL:http://openwall.com/lists/oss-security/2016/09/02/9  View
794931 93947 CVE-2016-7127 CONFIRM:http://www.php.net/ChangeLog-5.php  View
794932 93947 CVE-2016-7127 CONFIRM:http://www.php.net/ChangeLog-7.php  View
794933 93947 CVE-2016-7127 CONFIRM:https://bugs.php.net/bug.php?id=72730  View
794934 93947 CVE-2016-7127 CONFIRM:https://github.com/php/php-src/commit/1bd103df00f49cf4d4ade2cfe3f456ac058a4eae?w=1  View
794935 93947 CVE-2016-7127 BID:92757  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4692 JVNDB-2016-005465 wolfSSL の AES 暗号および復号の C ソフトウェアの実装における AES 鍵を取得される脆弱性 wolfSSL (旧 CyaSSL) の AES 暗号および復号の C ソフトウェアの実装には、AES 鍵を取得される脆弱性が存在します。 CVE-2016-7440 93947 2.1 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005465.html  View