CVE-2016-10167

概要

参考情報

• libgd.github.io/release-2.2.4.html · Release Notes
• debian.org/security/2017/dsa-3777
• openwall.com/lists/oss-security/2017/01/26/1 · Mailing List
• openwall.com/lists/oss-security/2017/01/28/6 · Mailing List
• securityfocus.com/bid/95869 · Third Party Advisory
• securitytracker.com/id/1037659
• access.redhat.com/errata/RHSA-2017:3221
• access.redhat.com/errata/RHSA-2018:1296
• libgd/libgd commit fe9ed49 · Issue Tracking
• tenable.com/security/tns-2017-04

libgd のその他の脆弱性

• CVE-2021-40812中 6.5The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return valu…
• CVE-2021-40145高 7.5gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 im…
• CVE-2021-38115中 6.5read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-o…
• CVE-2017-6363高 8.1In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor sa…
• CVE-2018-14553高 7.5gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specif…