CVE-2016-5767

Mô tả

Tham khảo

• php/php-src commit c395c6e
• lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html
• lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html
• lists.opensuse.org/opensuse-updates/2016-08/msg00003.html
• php.net/ChangeLog-5.php · Release Notes
• php.net/ChangeLog-7.php · Release Notes
• rhn.redhat.com/errata/RHSA-2016-2598.html
• rhn.redhat.com/errata/RHSA-2016-2750.html
• openwall.com/lists/oss-security/2016/06/23/4 · Release Notes
• securityfocus.com/bid/91395
• bugs.php.net/bug.php
• h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay

Lỗ hổng khác của libgd

• CVE-2021-40812TRUNG BÌNH 6.5The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return valu…
• CVE-2021-40145CAO 7.5gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 im…
• CVE-2021-38115TRUNG BÌNH 6.5read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-o…
• CVE-2017-6363CAO 8.1In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor sa…
• CVE-2018-14553CAO 7.5gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specif…