Fluid Attacks Database

Description

Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
alpine v3.4	gd	>=0 <2.2.3-r0	2.2.3-r0
debian 12	libgd2	>=0 <2.2.2-43-g22cba39-1	2.2.2-43-g22cba39-1
debian 14	libgd2	>=0 <2.2.2-43-g22cba39-1	2.2.2-43-g22cba39-1
debian 13	libgd2	>=0 <2.2.2-43-g22cba39-1	2.2.2-43-g22cba39-1
packagist	php	>=5.5.0 <5.5.38 \|\| >=5.6.0 <5.6.24 \|\| >=7.0.0 <7.0.9	5.5.38, 5.6.24, 7.0.9

Aliases

1. CVE-2016-62072. NVD-2016-62073. OSV-ALPINE-2016-62074. OSV-2016-62075. OSV-DEBIAN-2016-62076. GCVE-2016-62077. SECURITY-CVE-2016-62078. SECURITY-TRACKER-CVE-2016-62079. lists.opensuse.org10. lists.opensuse.org11. packetstormsecurity.com12. rhn.redhat.com13. DEBIAN-dsa-363014. securityfocus.com15. securityfocus.com16. ubuntu.com17. libgd.github.io18. security.gentoo.org

References

1. https://bugs.php.net/bug.php?id=725582. http://www.securitytracker.com/id/1036535

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.