Summary
It was discovered that the GD library incorrectly handled certain malformed
TGA images. If a user or automated system were tricked into processing a
specially crafted TGA image, an attacker could cause a denial of service.
(CVE-2016-6132, CVE-2016-6214)
It was discovered that the GD library incorrectly handled memory when using
gdImageScale(). A remote attacker could possibly use this issue to cause a
denial of service or possibly execute arbitrary code. (CVE-2016-6207)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libgd2 | 2.1.0-3ubuntu0.3 |
| Ubuntu · 16.04 LTS 16.04:LTS | libgd2 | 2.1.1-4ubuntu0.16.04.3 |
Vulnerabilities 3
-
Unscored —
The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cau…
-
Unscored —
Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before …
-
Unscored —
gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-…