High severity · published Jan 4, 2017
CVE-2016-9933
Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before…
7.5
CVSS
6.9%
EPSS
No
On KEV
Description
Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)6.9% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libgd · Libgd
2.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-9933
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-9933
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2017-01/msg00002.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html
www.debian.org
http://www.debian.org/security/2017/dsa-3751
More from Libgd
9.8
CVE-2019-6978
The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c
9.8
CVE-2016-10166
Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified…
9.8
CVE-2016-6912
Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and…
9.8
CVE-2016-8670
Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13,…
9.8
CVE-2016-7568
Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause…