CVE-2016-6912
Published: 26 January 2017
Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.
Priority
Medium
CVSS 3 base score: 9.8
Status
| Package | Release | Status |
|---|---|---|
|
libgd2 Launchpad, Ubuntu, Debian |
Upstream |
Released
(2.2.4-1)
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Released
(2.1.1-4ubuntu0.16.04.6)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Released
(2.1.0-3ubuntu0.6)
|
|
|
Patches: Upstream: https://github.com/libgd/libgd/commit/a49feeae76d41959d85ee733925a4cf40bac61b2 |
||
|
php5 Launchpad, Ubuntu, Debian |
Upstream |
Needs triage
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Not vulnerable
(uses system gd)
|
|
|
php7.0 Launchpad, Ubuntu, Debian |
Upstream |
Needs triage
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Not vulnerable
(uses system gd)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|