CVE-2016-9933
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 6.9%
Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value.
Affected products
n/a · n/aReferences
http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.htmlhttp://lists.opensuse.org/opensuse-updates/2016-12/msg00142.htmlhttp://lists.opensuse.org/opensuse-updates/2017-01/msg00002.htmlhttp://lists.opensuse.org/opensuse-updates/2017-01/msg00034.htmlhttp://lists.opensuse.org/opensuse-updates/2017-01/msg00054.htmlhttps://access.redhat.com/errata/RHSA-2018:1296https://bugs.php.net/bug.php?id=72696https://github.com/libgd/libgd/commit/77f619d48259383628c3ec4654b1ad578e9eb40ehttps://github.com/libgd/libgd/issues/215https://github.com/php/php-src/commit/863d37ea66d5c960db08d6f4a2cbd2518f0f80d1http://www.debian.org/security/2017/dsa-3751http://www.openwall.com/lists/oss-security/2016/12/12/2