Vulnerability-Lookup

OPENSUSE-SU-2024:10062-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 19:51

Summary

gd-2.2.3-2.1 on GA media

Severity

Moderate

Notes

Title of the patch: gd-2.2.3-2.1 on GA media

Description of the patch: These are all security issues fixed in the gd-2.2.3-2.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2024-10062

CVE-2014-2497

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64	—	Vendor Fix

Threats

Impact low

CVE-2016-5116

9.1 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2014-2497

Threats

Impact moderate

CVE-2016-5766

8.8 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 16 products, the same list as for CVE-2014-2497

Threats

Impact moderate

CVE-2016-6128

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2014-2497

Threats

Impact moderate

CVE-2016-6132

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2014-2497

Threats

Impact moderate

CVE-2016-6207

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2014-2497

Threats

Impact moderate

CVE-2016-6214

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2014-2497

Threats

Impact moderate

CVE-2016-6905

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2014-2497

Threats

Impact moderate

References

32 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2014-2497/	self
https://www.suse.com/security/cve/CVE-2016-5116/	self
https://www.suse.com/security/cve/CVE-2016-5766/	self
https://www.suse.com/security/cve/CVE-2016-6128/	self
https://www.suse.com/security/cve/CVE-2016-6132/	self
https://www.suse.com/security/cve/CVE-2016-6207/	self
https://www.suse.com/security/cve/CVE-2016-6214/	self
https://www.suse.com/security/cve/CVE-2016-6905/	self
https://www.suse.com/security/cve/CVE-2014-2497	external
https://bugzilla.suse.com/868624	external
https://www.suse.com/security/cve/CVE-2016-5116	external
https://bugzilla.suse.com/982176	external
https://www.suse.com/security/cve/CVE-2016-5766	external
https://bugzilla.suse.com/986386	external
https://www.suse.com/security/cve/CVE-2016-6128	external
https://bugzilla.suse.com/987580	external
https://bugzilla.suse.com/991710	external
https://www.suse.com/security/cve/CVE-2016-6132	external
https://bugzilla.suse.com/987577	external
https://bugzilla.suse.com/991436	external
https://bugzilla.suse.com/995034	external
https://www.suse.com/security/cve/CVE-2016-6207	external
https://bugzilla.suse.com/991434	external
https://bugzilla.suse.com/991622	external
https://www.suse.com/security/cve/CVE-2016-6214	external
https://bugzilla.suse.com/987577	external
https://bugzilla.suse.com/991436	external
https://bugzilla.suse.com/995034	external
https://www.suse.com/security/cve/CVE-2016-6905	external
https://bugzilla.suse.com/995034	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "gd-2.2.3-2.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the gd-2.2.3-2.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10062",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10062-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-2497 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-2497/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5116 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5116/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5766 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5766/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6128 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6128/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6132 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6132/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6207 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6207/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6214 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6214/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6905 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6905/"
      }
    ],
    "title": "gd-2.2.3-2.1 on GA media",
    "tracking": {
      "current_release_date": "2026-09-20T19:51:33Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10062-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T19:51:33Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gd-0:2.2.3-2.1.aarch64",
                "product": {
                  "name": "gd-0:2.2.3-2.1.aarch64",
                  "product_id": "gd-0:2.2.3-2.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gd@2.2.3-2.1?arch=aarch64\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gd-devel-0:2.2.3-2.1.aarch64",
                "product": {
                  "name": "gd-devel-0:2.2.3-2.1.aarch64",
                  "product_id": "gd-devel-0:2.2.3-2.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gd-devel@2.2.3-2.1?arch=aarch64\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-0:2.2.3-2.1.aarch64",
                "product": {
                  "name": "libgd3-0:2.2.3-2.1.aarch64",
                  "product_id": "libgd3-0:2.2.3-2.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libgd3@2.2.3-2.1?arch=aarch64\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-32bit-0:2.2.3-2.1.aarch64",
                "product": {
                  "name": "libgd3-32bit-0:2.2.3-2.1.aarch64",
                  "product_id": "libgd3-32bit-0:2.2.3-2.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libgd3-32bit@2.2.3-2.1?arch=aarch64\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gd-0:2.2.3-2.1.ppc64le",
                "product": {
                  "name": "gd-0:2.2.3-2.1.ppc64le",
                  "product_id": "gd-0:2.2.3-2.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gd@2.2.3-2.1?arch=ppc64le\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gd-devel-0:2.2.3-2.1.ppc64le",
                "product": {
                  "name": "gd-devel-0:2.2.3-2.1.ppc64le",
                  "product_id": "gd-devel-0:2.2.3-2.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gd-devel@2.2.3-2.1?arch=ppc64le\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-0:2.2.3-2.1.ppc64le",
                "product": {
                  "name": "libgd3-0:2.2.3-2.1.ppc64le",
                  "product_id": "libgd3-0:2.2.3-2.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libgd3@2.2.3-2.1?arch=ppc64le\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-32bit-0:2.2.3-2.1.ppc64le",
                "product": {
                  "name": "libgd3-32bit-0:2.2.3-2.1.ppc64le",
                  "product_id": "libgd3-32bit-0:2.2.3-2.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libgd3-32bit@2.2.3-2.1?arch=ppc64le\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gd-0:2.2.3-2.1.s390x",
                "product": {
                  "name": "gd-0:2.2.3-2.1.s390x",
                  "product_id": "gd-0:2.2.3-2.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gd@2.2.3-2.1?arch=s390x\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gd-devel-0:2.2.3-2.1.s390x",
                "product": {
                  "name": "gd-devel-0:2.2.3-2.1.s390x",
                  "product_id": "gd-devel-0:2.2.3-2.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gd-devel@2.2.3-2.1?arch=s390x\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-0:2.2.3-2.1.s390x",
                "product": {
                  "name": "libgd3-0:2.2.3-2.1.s390x",
                  "product_id": "libgd3-0:2.2.3-2.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libgd3@2.2.3-2.1?arch=s390x\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-32bit-0:2.2.3-2.1.s390x",
                "product": {
                  "name": "libgd3-32bit-0:2.2.3-2.1.s390x",
                  "product_id": "libgd3-32bit-0:2.2.3-2.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libgd3-32bit@2.2.3-2.1?arch=s390x\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gd-0:2.2.3-2.1.x86_64",
                "product": {
                  "name": "gd-0:2.2.3-2.1.x86_64",
                  "product_id": "gd-0:2.2.3-2.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gd@2.2.3-2.1?arch=x86_64\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gd-devel-0:2.2.3-2.1.x86_64",
                "product": {
                  "name": "gd-devel-0:2.2.3-2.1.x86_64",
                  "product_id": "gd-devel-0:2.2.3-2.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gd-devel@2.2.3-2.1?arch=x86_64\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-0:2.2.3-2.1.x86_64",
                "product": {
                  "name": "libgd3-0:2.2.3-2.1.x86_64",
                  "product_id": "libgd3-0:2.2.3-2.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libgd3@2.2.3-2.1?arch=x86_64\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libgd3-32bit-0:2.2.3-2.1.x86_64",
                "product": {
                  "name": "libgd3-32bit-0:2.2.3-2.1.x86_64",
                  "product_id": "libgd3-32bit-0:2.2.3-2.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libgd:libgd:2.2.3:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libgd3-32bit@2.2.3-2.1?arch=x86_64\u0026upstream=gd-0:2.2.3-2.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-0:2.2.3-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64"
        },
        "product_reference": "gd-0:2.2.3-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-0:2.2.3-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le"
        },
        "product_reference": "gd-0:2.2.3-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-0:2.2.3-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x"
        },
        "product_reference": "gd-0:2.2.3-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-0:2.2.3-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64"
        },
        "product_reference": "gd-0:2.2.3-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-devel-0:2.2.3-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64"
        },
        "product_reference": "gd-devel-0:2.2.3-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-devel-0:2.2.3-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le"
        },
        "product_reference": "gd-devel-0:2.2.3-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-devel-0:2.2.3-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x"
        },
        "product_reference": "gd-devel-0:2.2.3-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gd-devel-0:2.2.3-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64"
        },
        "product_reference": "gd-devel-0:2.2.3-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-0:2.2.3-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64"
        },
        "product_reference": "libgd3-0:2.2.3-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-0:2.2.3-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le"
        },
        "product_reference": "libgd3-0:2.2.3-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-0:2.2.3-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x"
        },
        "product_reference": "libgd3-0:2.2.3-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-0:2.2.3-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64"
        },
        "product_reference": "libgd3-0:2.2.3-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-32bit-0:2.2.3-2.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64"
        },
        "product_reference": "libgd3-32bit-0:2.2.3-2.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-32bit-0:2.2.3-2.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le"
        },
        "product_reference": "libgd3-32bit-0:2.2.3-2.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-32bit-0:2.2.3-2.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x"
        },
        "product_reference": "libgd3-32bit-0:2.2.3-2.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgd3-32bit-0:2.2.3-2.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
        },
        "product_reference": "libgd3-32bit-0:2.2.3-2.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-2497",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-2497"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-2497",
          "url": "https://www.suse.com/security/cve/CVE-2014-2497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 868624 for CVE-2014-2497",
          "url": "https://bugzilla.suse.com/868624"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2014-2497"
    },
    {
      "cve": "CVE-2016-5116",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5116"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5116",
          "url": "https://www.suse.com/security/cve/CVE-2016-5116"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982176 for CVE-2016-5116",
          "url": "https://bugzilla.suse.com/982176"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5116"
    },
    {
      "cve": "CVE-2016-5766",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5766"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5766",
          "url": "https://www.suse.com/security/cve/CVE-2016-5766"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 986386 for CVE-2016-5766",
          "url": "https://bugzilla.suse.com/986386"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5766"
    },
    {
      "cve": "CVE-2016-6128",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6128"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application crash) via an invalid color index.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6128",
          "url": "https://www.suse.com/security/cve/CVE-2016-6128"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 987580 for CVE-2016-6128",
          "url": "https://bugzilla.suse.com/987580"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991710 for CVE-2016-6128",
          "url": "https://bugzilla.suse.com/991710"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-6128"
    },
    {
      "cve": "CVE-2016-6132",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6132"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6132",
          "url": "https://www.suse.com/security/cve/CVE-2016-6132"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 987577 for CVE-2016-6132",
          "url": "https://bugzilla.suse.com/987577"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991436 for CVE-2016-6132",
          "url": "https://bugzilla.suse.com/991436"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 995034 for CVE-2016-6132",
          "url": "https://bugzilla.suse.com/995034"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-6132"
    },
    {
      "cve": "CVE-2016-6207",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6207"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6207",
          "url": "https://www.suse.com/security/cve/CVE-2016-6207"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991434 for CVE-2016-6207",
          "url": "https://bugzilla.suse.com/991434"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991622 for CVE-2016-6207",
          "url": "https://bugzilla.suse.com/991622"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-6207"
    },
    {
      "cve": "CVE-2016-6214",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6214"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6214",
          "url": "https://www.suse.com/security/cve/CVE-2016-6214"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 987577 for CVE-2016-6214",
          "url": "https://bugzilla.suse.com/987577"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991436 for CVE-2016-6214",
          "url": "https://bugzilla.suse.com/991436"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 995034 for CVE-2016-6214",
          "url": "https://bugzilla.suse.com/995034"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-6214"
    },
    {
      "cve": "CVE-2016-6905",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6905"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
          "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6905",
          "url": "https://www.suse.com/security/cve/CVE-2016-6905"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 995034 for CVE-2016-6905",
          "url": "https://bugzilla.suse.com/995034"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:gd-devel-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-0:2.2.3-2.1.x86_64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.aarch64",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.ppc64le",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.s390x",
            "openSUSE Tumbleweed:libgd3-32bit-0:2.2.3-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-6905"
    }
  ]
}

CVE-2014-2497 (GCVE-0-2014-2497)

Vulnerability from cvelistv5 – Published: 2014-03-21 14:00 – Updated: 2024-08-06 10:14

Summary

The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2350 records in the last 180 days details

References

21 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/59418	third-party-advisoryx_refsource_SECUNIA
https://support.apple.com/HT204659	x_refsource_CONFIRM
http://secunia.com/advisories/59496	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2014-1766.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/59652	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=1076676	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3215	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/59061	third-party-advisoryx_refsource_SECUNIA
https://security.gentoo.org/glsa/201607-04	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2014-1326.html	vendor-advisoryx_refsource_REDHAT
http://advisories.mageia.org/MGASA-2014-0288.html	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.securityfocus.com/bid/66233	vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/USN-2987-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-1327.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-1765.html	vendor-advisoryx_refsource_REDHAT
https://bugs.php.net/bug.php?id=66901	x_refsource_CONFIRM

Date Public

2014-03-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:14:26.563Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2014:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html"
          },
          {
            "name": "MDVSA-2015:153",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:153"
          },
          {
            "name": "59418",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59418"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT204659"
          },
          {
            "name": "59496",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59496"
          },
          {
            "name": "RHSA-2014:1766",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
          },
          {
            "name": "59652",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59652"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1076676"
          },
          {
            "name": "SUSE-SU-2014:0869",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
          },
          {
            "name": "DSA-3215",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3215"
          },
          {
            "name": "59061",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59061"
          },
          {
            "name": "GLSA-201607-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201607-04"
          },
          {
            "name": "RHSA-2014:1326",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1326.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2014-0288.html"
          },
          {
            "name": "APPLE-SA-2015-04-08-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
          },
          {
            "name": "66233",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/66233"
          },
          {
            "name": "USN-2987-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2987-1"
          },
          {
            "name": "RHSA-2014:1327",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
          },
          {
            "name": "RHSA-2014:1765",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=66901"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-03-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-01-05T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SU-2014:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html"
        },
        {
          "name": "MDVSA-2015:153",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:153"
        },
        {
          "name": "59418",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59418"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT204659"
        },
        {
          "name": "59496",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59496"
        },
        {
          "name": "RHSA-2014:1766",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
        },
        {
          "name": "59652",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59652"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1076676"
        },
        {
          "name": "SUSE-SU-2014:0869",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
        },
        {
          "name": "DSA-3215",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3215"
        },
        {
          "name": "59061",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59061"
        },
        {
          "name": "GLSA-201607-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201607-04"
        },
        {
          "name": "RHSA-2014:1326",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1326.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2014-0288.html"
        },
        {
          "name": "APPLE-SA-2015-04-08-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
        },
        {
          "name": "66233",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/66233"
        },
        {
          "name": "USN-2987-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2987-1"
        },
        {
          "name": "RHSA-2014:1327",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
        },
        {
          "name": "RHSA-2014:1765",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=66901"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2014-2497",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2014:0868",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html"
            },
            {
              "name": "MDVSA-2015:153",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:153"
            },
            {
              "name": "59418",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59418"
            },
            {
              "name": "https://support.apple.com/HT204659",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT204659"
            },
            {
              "name": "59496",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59496"
            },
            {
              "name": "RHSA-2014:1766",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1766.html"
            },
            {
              "name": "59652",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59652"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1076676",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1076676"
            },
            {
              "name": "SUSE-SU-2014:0869",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html"
            },
            {
              "name": "DSA-3215",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3215"
            },
            {
              "name": "59061",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/59061"
            },
            {
              "name": "GLSA-201607-04",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201607-04"
            },
            {
              "name": "RHSA-2014:1326",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1326.html"
            },
            {
              "name": "http://advisories.mageia.org/MGASA-2014-0288.html",
              "refsource": "CONFIRM",
              "url": "http://advisories.mageia.org/MGASA-2014-0288.html"
            },
            {
              "name": "APPLE-SA-2015-04-08-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html"
            },
            {
              "name": "66233",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/66233"
            },
            {
              "name": "USN-2987-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2987-1"
            },
            {
              "name": "RHSA-2014:1327",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1327.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html"
            },
            {
              "name": "RHSA-2014:1765",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2014-1765.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=66901",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=66901"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2014-2497",
    "datePublished": "2014-03-21T14:00:00.000Z",
    "dateReserved": "2014-03-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T10:14:26.563Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5116 (GCVE-0-2016-5116)

Vulnerability from cvelistv5 – Published: 2016-08-07 10:00 – Updated: 2024-08-06 00:53

Summary

gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2350 records in the last 180 days details

References

6 references

URL	Tags
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
https://github.com/libgd/libgd/issues/211	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2016/05/29/5	mailing-listx_refsource_MLIST
http://www.debian.org/security/2016/dsa-3619	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-3030-1	vendor-advisoryx_refsource_UBUNTU
https://github.com/libgd/libgd/commit/4dc1a2d7931…	x_refsource_CONFIRM

Date Public

2016-05-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:47.352Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:2363",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libgd/libgd/issues/211"
          },
          {
            "name": "[oss-security] 20160529 Re: CVE Request: libgd - gdCtxPrintf memory leak",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/29/5"
          },
          {
            "name": "DSA-3619",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3619"
          },
          {
            "name": "USN-3030-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3030-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libgd/libgd/commit/4dc1a2d7931017d3625f2d7cff70a17ce58b53b4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:2363",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libgd/libgd/issues/211"
        },
        {
          "name": "[oss-security] 20160529 Re: CVE Request: libgd - gdCtxPrintf memory leak",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/29/5"
        },
        {
          "name": "DSA-3619",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3619"
        },
        {
          "name": "USN-3030-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3030-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libgd/libgd/commit/4dc1a2d7931017d3625f2d7cff70a17ce58b53b4"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-5116",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:2363",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
            },
            {
              "name": "https://github.com/libgd/libgd/issues/211",
              "refsource": "CONFIRM",
              "url": "https://github.com/libgd/libgd/issues/211"
            },
            {
              "name": "[oss-security] 20160529 Re: CVE Request: libgd - gdCtxPrintf memory leak",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/29/5"
            },
            {
              "name": "DSA-3619",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3619"
            },
            {
              "name": "USN-3030-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3030-1"
            },
            {
              "name": "https://github.com/libgd/libgd/commit/4dc1a2d7931017d3625f2d7cff70a17ce58b53b4",
              "refsource": "CONFIRM",
              "url": "https://github.com/libgd/libgd/commit/4dc1a2d7931017d3625f2d7cff70a17ce58b53b4"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5116",
    "datePublished": "2016-08-07T10:00:00.000Z",
    "dateReserved": "2016-05-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T00:53:47.352Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5766 (GCVE-0-2016-5766)

Vulnerability from cvelistv5 – Published: 2016-08-07 10:00 – Updated: 2024-08-06 01:15

Summary

Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2350 records in the last 180 days details

References

15 references

URL	Tags
https://bugs.php.net/bug.php?id=72339	x_refsource_CONFIRM
https://libgd.github.io/release-2.2.3.html	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-2598.html	vendor-advisoryx_refsource_REDHAT
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://github.com/php/php-src/commit/7722455726be…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2016/06/23/4	mailing-listx_refsource_MLIST
https://security.gentoo.org/glsa/201612-09	vendor-advisoryx_refsource_GENTOO
http://php.net/ChangeLog-7.php	x_refsource_CONFIRM
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
http://www.debian.org/security/2016/dsa-3619	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-3030-1	vendor-advisoryx_refsource_UBUNTU

Date Public

2016-06-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:15:09.075Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=72339"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://libgd.github.io/release-2.2.3.html"
          },
          {
            "name": "openSUSE-SU-2016:1761",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html"
          },
          {
            "name": "openSUSE-SU-2016:1922",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html"
          },
          {
            "name": "RHSA-2016:2750",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
          },
          {
            "name": "RHSA-2016:2598",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2598.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://github.com/php/php-src/commit/7722455726bec8c53458a32851d2a87982cf0eac?w=1"
          },
          {
            "name": "[oss-security] 20160623 Re: CVE for PHP 5.5.37 issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/23/4"
          },
          {
            "name": "GLSA-201612-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201612-09"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/ChangeLog-7.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
          },
          {
            "name": "DSA-3619",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3619"
          },
          {
            "name": "SUSE-SU-2016:2013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html"
          },
          {
            "name": "USN-3030-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3030-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-06-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=72339"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://libgd.github.io/release-2.2.3.html"
        },
        {
          "name": "openSUSE-SU-2016:1761",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html"
        },
        {
          "name": "openSUSE-SU-2016:1922",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html"
        },
        {
          "name": "RHSA-2016:2750",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
        },
        {
          "name": "RHSA-2016:2598",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2598.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://github.com/php/php-src/commit/7722455726bec8c53458a32851d2a87982cf0eac?w=1"
        },
        {
          "name": "[oss-security] 20160623 Re: CVE for PHP 5.5.37 issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/23/4"
        },
        {
          "name": "GLSA-201612-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201612-09"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/ChangeLog-7.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
        },
        {
          "name": "DSA-3619",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3619"
        },
        {
          "name": "SUSE-SU-2016:2013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html"
        },
        {
          "name": "USN-3030-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3030-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-5766",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.php.net/bug.php?id=72339",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=72339"
            },
            {
              "name": "https://libgd.github.io/release-2.2.3.html",
              "refsource": "CONFIRM",
              "url": "https://libgd.github.io/release-2.2.3.html"
            },
            {
              "name": "openSUSE-SU-2016:1761",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html"
            },
            {
              "name": "openSUSE-SU-2016:1922",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html"
            },
            {
              "name": "RHSA-2016:2750",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
            },
            {
              "name": "RHSA-2016:2598",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2598.html"
            },
            {
              "name": "http://php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-5.php"
            },
            {
              "name": "http://github.com/php/php-src/commit/7722455726bec8c53458a32851d2a87982cf0eac?w=1",
              "refsource": "CONFIRM",
              "url": "http://github.com/php/php-src/commit/7722455726bec8c53458a32851d2a87982cf0eac?w=1"
            },
            {
              "name": "[oss-security] 20160623 Re: CVE for PHP 5.5.37 issues",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/23/4"
            },
            {
              "name": "GLSA-201612-09",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201612-09"
            },
            {
              "name": "http://php.net/ChangeLog-7.php",
              "refsource": "CONFIRM",
              "url": "http://php.net/ChangeLog-7.php"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"
            },
            {
              "name": "DSA-3619",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3619"
            },
            {
              "name": "SUSE-SU-2016:2013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html"
            },
            {
              "name": "USN-3030-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3030-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5766",
    "datePublished": "2016-08-07T10:00:00.000Z",
    "dateReserved": "2016-06-23T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:15:09.075Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6128 (GCVE-0-2016-6128)

Vulnerability from cvelistv5 – Published: 2016-08-07 10:00 – Updated: 2024-08-06 01:22

Summary

The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application crash) via an invalid color index.

Severity

No CVSS data available.

CWE

Assigner

debian CNA under the mitre root

CNA scorecard – unranked: 2 records in the last 180 days, 10 needed details

References

13 references

URL	Tags
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://www.openwall.com/lists/oss-security/2016/06/30/1	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/91509	vdb-entryx_refsource_BID
https://libgd.github.io/release-2.2.3.html	x_refsource_CONFIRM
https://bugs.php.net/72494	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1036276	vdb-entryx_refsource_SECTRACK
https://github.com/libgd/libgd/commit/6ff72ae40c7…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201612-09	vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2016/dsa-3619	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-3030-1	vendor-advisoryx_refsource_UBUNTU
https://github.com/libgd/libgd/commit/1ccfe21e14c…	x_refsource_CONFIRM

Date Public

2016-06-27 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:22:20.543Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:2117",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html"
          },
          {
            "name": "[oss-security] 20160629 Re: CVE Request: libgd: Invalid color index is not properly handled leading to denial of service (crash)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/30/1"
          },
          {
            "name": "91509",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91509"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://libgd.github.io/release-2.2.3.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/72494"
          },
          {
            "name": "openSUSE-SU-2016:2363",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
          },
          {
            "name": "RHSA-2016:2750",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
          },
          {
            "name": "1036276",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036276"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libgd/libgd/commit/6ff72ae40c7c20ece939afb362d98cc37f4a1c96"
          },
          {
            "name": "GLSA-201612-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201612-09"
          },
          {
            "name": "DSA-3619",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3619"
          },
          {
            "name": "USN-3030-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3030-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libgd/libgd/commit/1ccfe21e14c4d18336f9da8515cd17db88c3de61"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-06-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application crash) via an invalid color index."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
        "shortName": "debian"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:2117",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html"
        },
        {
          "name": "[oss-security] 20160629 Re: CVE Request: libgd: Invalid color index is not properly handled leading to denial of service (crash)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/30/1"
        },
        {
          "name": "91509",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/91509"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://libgd.github.io/release-2.2.3.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/72494"
        },
        {
          "name": "openSUSE-SU-2016:2363",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
        },
        {
          "name": "RHSA-2016:2750",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
        },
        {
          "name": "1036276",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036276"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libgd/libgd/commit/6ff72ae40c7c20ece939afb362d98cc37f4a1c96"
        },
        {
          "name": "GLSA-201612-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201612-09"
        },
        {
          "name": "DSA-3619",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3619"
        },
        {
          "name": "USN-3030-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3030-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libgd/libgd/commit/1ccfe21e14c4d18336f9da8515cd17db88c3de61"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@debian.org",
          "ID": "CVE-2016-6128",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application crash) via an invalid color index."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:2117",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html"
            },
            {
              "name": "[oss-security] 20160629 Re: CVE Request: libgd: Invalid color index is not properly handled leading to denial of service (crash)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/30/1"
            },
            {
              "name": "91509",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/91509"
            },
            {
              "name": "https://libgd.github.io/release-2.2.3.html",
              "refsource": "CONFIRM",
              "url": "https://libgd.github.io/release-2.2.3.html"
            },
            {
              "name": "https://bugs.php.net/72494",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/72494"
            },
            {
              "name": "openSUSE-SU-2016:2363",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
            },
            {
              "name": "RHSA-2016:2750",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
            },
            {
              "name": "1036276",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036276"
            },
            {
              "name": "https://github.com/libgd/libgd/commit/6ff72ae40c7c20ece939afb362d98cc37f4a1c96",
              "refsource": "CONFIRM",
              "url": "https://github.com/libgd/libgd/commit/6ff72ae40c7c20ece939afb362d98cc37f4a1c96"
            },
            {
              "name": "GLSA-201612-09",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201612-09"
            },
            {
              "name": "DSA-3619",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3619"
            },
            {
              "name": "USN-3030-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3030-1"
            },
            {
              "name": "https://github.com/libgd/libgd/commit/1ccfe21e14c4d18336f9da8515cd17db88c3de61",
              "refsource": "CONFIRM",
              "url": "https://github.com/libgd/libgd/commit/1ccfe21e14c4d18336f9da8515cd17db88c3de61"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
    "assignerShortName": "debian",
    "cveId": "CVE-2016-6128",
    "datePublished": "2016-08-07T10:00:00.000Z",
    "dateReserved": "2016-06-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:22:20.543Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6132 (GCVE-0-2016-6132)

Vulnerability from cvelistv5 – Published: 2016-08-12 15:00 – Updated: 2024-08-06 01:22

Summary

The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2350 records in the last 180 days details

References

10 references

URL	Tags
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
https://libgd.github.io/release-2.2.3.html	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2016/06/30/6	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-3060-1	vendor-advisoryx_refsource_UBUNTU
https://github.com/libgd/libgd/issues/247	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201612-09	vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/91520	vdb-entryx_refsource_BID
http://www.openwall.com/lists/oss-security/2016/0…	mailing-listx_refsource_MLIST
http://www.debian.org/security/2016/dsa-3619	vendor-advisoryx_refsource_DEBIAN

Date Public

2016-06-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:22:20.312Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:2117",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://libgd.github.io/release-2.2.3.html"
          },
          {
            "name": "[oss-security] 20160630 CVE Request: A read out-of-bands was found in the parsing of TGA files using libgd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/30/6"
          },
          {
            "name": "openSUSE-SU-2016:2363",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
          },
          {
            "name": "USN-3060-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3060-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libgd/libgd/issues/247"
          },
          {
            "name": "GLSA-201612-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201612-09"
          },
          {
            "name": "91520",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91520"
          },
          {
            "name": "[oss-security] 20160630 Re: CVE Request: A read out-of-bands was found in the parsing of TGA files using libgd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/30/10"
          },
          {
            "name": "DSA-3619",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3619"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-06-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:2117",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://libgd.github.io/release-2.2.3.html"
        },
        {
          "name": "[oss-security] 20160630 CVE Request: A read out-of-bands was found in the parsing of TGA files using libgd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/30/6"
        },
        {
          "name": "openSUSE-SU-2016:2363",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
        },
        {
          "name": "USN-3060-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3060-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libgd/libgd/issues/247"
        },
        {
          "name": "GLSA-201612-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201612-09"
        },
        {
          "name": "91520",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/91520"
        },
        {
          "name": "[oss-security] 20160630 Re: CVE Request: A read out-of-bands was found in the parsing of TGA files using libgd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/30/10"
        },
        {
          "name": "DSA-3619",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3619"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-6132",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:2117",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html"
            },
            {
              "name": "https://libgd.github.io/release-2.2.3.html",
              "refsource": "CONFIRM",
              "url": "https://libgd.github.io/release-2.2.3.html"
            },
            {
              "name": "[oss-security] 20160630 CVE Request: A read out-of-bands was found in the parsing of TGA files using libgd",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/30/6"
            },
            {
              "name": "openSUSE-SU-2016:2363",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
            },
            {
              "name": "USN-3060-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3060-1"
            },
            {
              "name": "https://github.com/libgd/libgd/issues/247",
              "refsource": "CONFIRM",
              "url": "https://github.com/libgd/libgd/issues/247"
            },
            {
              "name": "GLSA-201612-09",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201612-09"
            },
            {
              "name": "91520",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/91520"
            },
            {
              "name": "[oss-security] 20160630 Re: CVE Request: A read out-of-bands was found in the parsing of TGA files using libgd",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/30/10"
            },
            {
              "name": "DSA-3619",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3619"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-6132",
    "datePublished": "2016-08-12T15:00:00.000Z",
    "dateReserved": "2016-06-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:22:20.312Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6207 (GCVE-0-2016-6207)

Vulnerability from cvelistv5 – Published: 2016-08-12 15:00 – Updated: 2024-08-06 01:22

Summary

Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2350 records in the last 180 days details

References

13 references

URL	Tags
http://www.securityfocus.com/bid/92080	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
https://libgd.github.io/release-2.2.3.html	x_refsource_CONFIRM
https://bugs.php.net/bug.php?id=72558	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-2750.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/archive/1/539100/100…	mailing-listx_refsource_BUGTRAQ
http://www.ubuntu.com/usn/USN-3060-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2016/dsa-3630	vendor-advisoryx_refsource_DEBIAN
http://www.securitytracker.com/id/1036535	vdb-entryx_refsource_SECTRACK
https://security.gentoo.org/glsa/201612-09	vendor-advisoryx_refsource_GENTOO
https://secunia.com/secunia_research/2016-9/	x_refsource_MISC
http://packetstormsecurity.com/files/138174/LibGD…	x_refsource_MISC

Date Public

2016-08-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:22:20.735Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "92080",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92080"
          },
          {
            "name": "openSUSE-SU-2016:2117",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://libgd.github.io/release-2.2.3.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=72558"
          },
          {
            "name": "openSUSE-SU-2016:2363",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
          },
          {
            "name": "RHSA-2016:2750",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
          },
          {
            "name": "20160803 Secunia Research: LibGD \"_gdContributionsAlloc()\" Integer Overflow Denial of Service Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/539100/100/0/threaded"
          },
          {
            "name": "USN-3060-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3060-1"
          },
          {
            "name": "DSA-3630",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3630"
          },
          {
            "name": "1036535",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036535"
          },
          {
            "name": "GLSA-201612-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201612-09"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://secunia.com/secunia_research/2016-9/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/138174/LibGD-2.2.2-Integer-Overflow-Denial-Of-Service.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "92080",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92080"
        },
        {
          "name": "openSUSE-SU-2016:2117",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://libgd.github.io/release-2.2.3.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.php.net/bug.php?id=72558"
        },
        {
          "name": "openSUSE-SU-2016:2363",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
        },
        {
          "name": "RHSA-2016:2750",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
        },
        {
          "name": "20160803 Secunia Research: LibGD \"_gdContributionsAlloc()\" Integer Overflow Denial of Service Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/539100/100/0/threaded"
        },
        {
          "name": "USN-3060-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3060-1"
        },
        {
          "name": "DSA-3630",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3630"
        },
        {
          "name": "1036535",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036535"
        },
        {
          "name": "GLSA-201612-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201612-09"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://secunia.com/secunia_research/2016-9/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/138174/LibGD-2.2.2-Integer-Overflow-Denial-Of-Service.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-6207",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "92080",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92080"
            },
            {
              "name": "openSUSE-SU-2016:2117",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html"
            },
            {
              "name": "https://libgd.github.io/release-2.2.3.html",
              "refsource": "CONFIRM",
              "url": "https://libgd.github.io/release-2.2.3.html"
            },
            {
              "name": "https://bugs.php.net/bug.php?id=72558",
              "refsource": "CONFIRM",
              "url": "https://bugs.php.net/bug.php?id=72558"
            },
            {
              "name": "openSUSE-SU-2016:2363",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
            },
            {
              "name": "RHSA-2016:2750",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2750.html"
            },
            {
              "name": "20160803 Secunia Research: LibGD \"_gdContributionsAlloc()\" Integer Overflow Denial of Service Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/539100/100/0/threaded"
            },
            {
              "name": "USN-3060-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3060-1"
            },
            {
              "name": "DSA-3630",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3630"
            },
            {
              "name": "1036535",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036535"
            },
            {
              "name": "GLSA-201612-09",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201612-09"
            },
            {
              "name": "https://secunia.com/secunia_research/2016-9/",
              "refsource": "MISC",
              "url": "https://secunia.com/secunia_research/2016-9/"
            },
            {
              "name": "http://packetstormsecurity.com/files/138174/LibGD-2.2.2-Integer-Overflow-Denial-Of-Service.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/138174/LibGD-2.2.2-Integer-Overflow-Denial-Of-Service.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-6207",
    "datePublished": "2016-08-12T15:00:00.000Z",
    "dateReserved": "2016-07-13T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:22:20.735Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6214 (GCVE-0-2016-6214)

Vulnerability from cvelistv5 – Published: 2016-08-12 15:00 – Updated: 2024-08-06 01:22

Summary

gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2350 records in the last 180 days details

References

9 references

URL	Tags
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
https://libgd.github.io/release-2.2.3.html	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
https://github.com/libgd/libgd/issues/247#issueco…	x_refsource_CONFIRM
https://github.com/libgd/libgd/commit/10ef1dca63d…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2016/0…	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2016/07/13/5	mailing-listx_refsource_MLIST
http://www.ubuntu.com/usn/USN-3060-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2016/dsa-3619	vendor-advisoryx_refsource_DEBIAN

Date Public

2016-07-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:22:20.648Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:2117",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://libgd.github.io/release-2.2.3.html"
          },
          {
            "name": "openSUSE-SU-2016:2363",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libgd/libgd/issues/247#issuecomment-232084241"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libgd/libgd/commit/10ef1dca63d62433fda13309b4a228782db823f7"
          },
          {
            "name": "[oss-security] 20160713 Re: CVE Request: A read out-of-bands was found in the parsing of TGA files using libgd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/07/13/12"
          },
          {
            "name": "[oss-security] 20160713 Re: CVE Request: A read out-of-bands was found in the parsing of TGA files using libgd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/07/13/5"
          },
          {
            "name": "USN-3060-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3060-1"
          },
          {
            "name": "DSA-3619",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3619"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-07-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:2117",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://libgd.github.io/release-2.2.3.html"
        },
        {
          "name": "openSUSE-SU-2016:2363",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libgd/libgd/issues/247#issuecomment-232084241"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libgd/libgd/commit/10ef1dca63d62433fda13309b4a228782db823f7"
        },
        {
          "name": "[oss-security] 20160713 Re: CVE Request: A read out-of-bands was found in the parsing of TGA files using libgd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/07/13/12"
        },
        {
          "name": "[oss-security] 20160713 Re: CVE Request: A read out-of-bands was found in the parsing of TGA files using libgd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/07/13/5"
        },
        {
          "name": "USN-3060-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3060-1"
        },
        {
          "name": "DSA-3619",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3619"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-6214",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:2117",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html"
            },
            {
              "name": "https://libgd.github.io/release-2.2.3.html",
              "refsource": "CONFIRM",
              "url": "https://libgd.github.io/release-2.2.3.html"
            },
            {
              "name": "openSUSE-SU-2016:2363",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
            },
            {
              "name": "https://github.com/libgd/libgd/issues/247#issuecomment-232084241",
              "refsource": "CONFIRM",
              "url": "https://github.com/libgd/libgd/issues/247#issuecomment-232084241"
            },
            {
              "name": "https://github.com/libgd/libgd/commit/10ef1dca63d62433fda13309b4a228782db823f7",
              "refsource": "CONFIRM",
              "url": "https://github.com/libgd/libgd/commit/10ef1dca63d62433fda13309b4a228782db823f7"
            },
            {
              "name": "[oss-security] 20160713 Re: CVE Request: A read out-of-bands was found in the parsing of TGA files using libgd",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/07/13/12"
            },
            {
              "name": "[oss-security] 20160713 Re: CVE Request: A read out-of-bands was found in the parsing of TGA files using libgd",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/07/13/5"
            },
            {
              "name": "USN-3060-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3060-1"
            },
            {
              "name": "DSA-3619",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3619"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-6214",
    "datePublished": "2016-08-12T15:00:00.000Z",
    "dateReserved": "2016-07-13T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:22:20.648Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6905 (GCVE-0-2016-6905)

Vulnerability from cvelistv5 – Published: 2016-10-03 21:00 – Updated: 2024-08-06 01:43

Summary

The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2350 records in the last 180 days details

References

9 references

URL	Tags
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/91743	vdb-entryx_refsource_BID
http://libgd.github.io/release-2.2.3.html	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
https://github.com/libgd/libgd/issues/248	x_refsource_CONFIRM
https://github.com/libgd/libgd/pull/251	x_refsource_CONFIRM
https://github.com/libgd/libgd/commit/3c2b605d72e…	x_refsource_CONFIRM
https://github.com/libgd/libgd/commit/01c61f8ab11…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2016/08/23/1	mailing-listx_refsource_MLIST

Date Public

2016-07-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:43:38.469Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:2363",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
          },
          {
            "name": "91743",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91743"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://libgd.github.io/release-2.2.3.html"
          },
          {
            "name": "openSUSE-SU-2016:2203",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00121.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libgd/libgd/issues/248"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libgd/libgd/pull/251"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03"
          },
          {
            "name": "[oss-security] 20160822 Re: CVE Request: libgd: Out-Of-Bounds Read in function read_image_tga of gd_tga.c",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/23/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-07-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-03-15T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:2363",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
        },
        {
          "name": "91743",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/91743"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://libgd.github.io/release-2.2.3.html"
        },
        {
          "name": "openSUSE-SU-2016:2203",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00121.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libgd/libgd/issues/248"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libgd/libgd/pull/251"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03"
        },
        {
          "name": "[oss-security] 20160822 Re: CVE Request: libgd: Out-Of-Bounds Read in function read_image_tga of gd_tga.c",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/23/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-6905",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2016:2363",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html"
            },
            {
              "name": "91743",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/91743"
            },
            {
              "name": "http://libgd.github.io/release-2.2.3.html",
              "refsource": "CONFIRM",
              "url": "http://libgd.github.io/release-2.2.3.html"
            },
            {
              "name": "openSUSE-SU-2016:2203",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00121.html"
            },
            {
              "name": "https://github.com/libgd/libgd/issues/248",
              "refsource": "CONFIRM",
              "url": "https://github.com/libgd/libgd/issues/248"
            },
            {
              "name": "https://github.com/libgd/libgd/pull/251",
              "refsource": "CONFIRM",
              "url": "https://github.com/libgd/libgd/pull/251"
            },
            {
              "name": "https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186",
              "refsource": "CONFIRM",
              "url": "https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186"
            },
            {
              "name": "https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03",
              "refsource": "CONFIRM",
              "url": "https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03"
            },
            {
              "name": "[oss-security] 20160822 Re: CVE Request: libgd: Out-Of-Bounds Read in function read_image_tga of gd_tga.c",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/08/23/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-6905",
    "datePublished": "2016-10-03T21:00:00.000Z",
    "dateReserved": "2016-08-22T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:43:38.469Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2024:10062-1

CVE-2014-2497 (GCVE-0-2014-2497)

CVE-2016-5116 (GCVE-0-2016-5116)

CVE-2016-5766 (GCVE-0-2016-5766)

CVE-2016-6128 (GCVE-0-2016-6128)

CVE-2016-6132 (GCVE-0-2016-6132)

CVE-2016-6207 (GCVE-0-2016-6207)

CVE-2016-6214 (GCVE-0-2016-6214)

CVE-2016-6905 (GCVE-0-2016-6905)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour