| Package | Affected versions | Patched versions |
|---|---|---|
| libgd | ≤ 2.1.1 | |
| php | ≤ 5.6.11 |
The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free