Fluid Attacks Database

Description

Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	libgd2	>=0 <2.2.2-43-g22cba39-1	2.2.2-43-g22cba39-1
alpine v3.4	gd	=2.0.35-r0 \|\| =2.0.35-r1 \|\| =2.0.35-r2 \|\| =2.0.36_rc1-r1 \|\| =2.0.36_rc1-r2 \|\| =2.0.36_rc1-r3 \|\| =2.0.36_rc1-r4 \|\| =2.0.36_rc1-r5 \|\| =2.0.36_rc1-r6 \|\| =2.0.36_rc1-r7 \|\| =2.0.36_rc1-r8 \|\| =2.0.36_rc1-r9 \|\| =2.1.0-r0 \|\| =2.1.0-r1 \|\| =2.1.1-r0 \|\| =2.2.1-r0 \|\| >=0 <2.2.3-r0	2.2.3-r0
debian 12	libgd2	>=0 <2.2.2-43-g22cba39-1	2.2.2-43-g22cba39-1
debian 14	libgd2	>=0 <2.2.2-43-g22cba39-1	2.2.2-43-g22cba39-1
debian 13	libgd2	>=0 <2.2.2-43-g22cba39-1	2.2.2-43-g22cba39-1

Aliases

1. CVE-2016-62072. NVD-2016-62073. OSV-DEBIAN-2016-62074. OSV-2016-62075. OSV-ALPINE-2016-62076. SECURITY-TRACKER-CVE-2016-62077. SECURITY-CVE-2016-6207

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.