The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted image that is mishandled by the imagescale function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade php55Upgrade php56 | Jun 15, 2016 | Jun 2, 2016 |
| Apple Osx Apachemodphp | — | Apply OS X security update 2016-004Upgrade macOS to the latest version | Nov 11, 2016 | Aug 7, 2016 |
| Debian | — | Upgrade libgd2 | Jun 14, 2016 | Jun 14, 2016 |
| Freebsd | — | Upgrade php70-gdUpgrade php56-gdUpgrade php56Upgrade php55Upgrade php55-gdUpgrade php55-pharUpgrade php70-intl | Dec 10, 2025 | May 28, 2016 |
| Php | — | Upgrade to PHP version 5.6.22Upgrade to PHP version 5.5.36 | Sep 30, 2019 | Aug 7, 2016 |
| Suse | — | Upgrade php5-tidyUpgrade php5-mysql-debuginfoUpgrade php5-ftpUpgrade php5-bcmathUpgrade php5-exifUpgrade php5-xmlreaderUpgrade php5-phar-debuginfoUpgrade php5-json-debuginfoUpgrade php5-openssl-debuginfoUpgrade php5-enchant-debuginfoUpgrade php5-snmp-debuginfoUpgrade php5-ctypeUpgrade php5-mcrypt-debuginfoUpgrade php5-opensslUpgrade php5-wddx-debuginfoUpgrade php5-iconvUpgrade apache2-mod_php5Upgrade php5-mbstringUpgrade php5-fpm-debuginfoUpgrade php5-xmlwriter-debuginfoUpgrade php5-exif-debuginfoUpgrade php5-xmlrpcUpgrade php5-calendar-debuginfoUpgrade php5-fastcgiUpgrade php5-posix-debuginfoUpgrade php5-sysvsemUpgrade php5-xslUpgrade php5-pdo-debuginfoUpgrade php5-suhosin-debuginfoUpgrade php5-fastcgi-debuginfoUpgrade libc-client2007e_suseUpgrade php5-pearUpgrade php5-debuginfoUpgrade php5-iconv-debuginfoUpgrade imapUpgrade php5-zipUpgrade php5-sysvshmUpgrade php5-domUpgrade php5-imap-debuginfoUpgrade imap-debugsourceUpgrade php5-shmop-debuginfoUpgrade php5-sysvsem-debuginfoUpgrade php5-tidy-debuginfoUpgrade php5-intlUpgrade php5-sqlite-debuginfoUpgrade php5-xmlwriterUpgrade php5-socketsUpgrade php5-pharUpgrade php5-jsonUpgrade php5-dom-debuginfoUpgrade php5-wddxUpgrade php5-tokenizer-debuginfoUpgrade php5-debugsourceUpgrade php5-pdoUpgrade php5-imapUpgrade php5-bcmath-debuginfoUpgrade php5-gettextUpgrade php5-posixUpgrade php5-sysvmsgUpgrade php5-ldap-debuginfoUpgrade php5-pspell-debuginfoUpgrade php5-curlUpgrade php5-sysvshm-debuginfoUpgrade php5-pcntl-debuginfoUpgrade php5-pgsql-debuginfoUpgrade php5-ldapUpgrade php5-curl-debuginfoUpgrade php5-xsl-debuginfoUpgrade php5-ctype-debuginfoUpgrade php5-dbaUpgrade php5-sockets-debuginfoUpgrade php5-mssql-debuginfoUpgrade php5-calendarUpgrade php5-firebirdUpgrade php5-shmopUpgrade php5-readlineUpgrade php5-zip-debuginfoUpgrade php5-xmlreader-debuginfoUpgrade php5-suhosinUpgrade php5-odbcUpgrade php5-snmpUpgrade php5-mcryptUpgrade php5-mssqlUpgrade php5-intl-debuginfoUpgrade php5-zlib-debuginfoUpgrade php5-soap-debuginfoUpgrade php5-readline-debuginfoUpgrade php5-gd-debuginfoUpgrade php5-odbc-debuginfoUpgrade php5-firebird-debuginfoUpgrade php5-fpmUpgrade libc-client2007e_suse-debuginfoUpgrade php5-fileinfoUpgrade php5-sqliteUpgrade php5-mysqlUpgrade php5-dba-debuginfoUpgrade php5-opcache-debuginfoUpgrade php5-pgsqlUpgrade php5-develUpgrade php5-ftp-debuginfoUpgrade php5-sysvmsg-debuginfoUpgrade php5-enchantUpgrade imap-debuginfoUpgrade php5-pspellUpgrade php5-fileinfo-debuginfoUpgrade php5-gmpUpgrade apache2-mod_php5-debuginfoUpgrade php5-xmlrpc-debuginfoUpgrade php5Upgrade php5-gmp-debuginfoUpgrade php5-zlibUpgrade php5-gettext-debuginfoUpgrade php5-mbstring-debuginfoUpgrade php5-tokenizerUpgrade php5-soapUpgrade php5-gdUpgrade imap-develUpgrade php5-pcntlUpgrade php5-bz2-debuginfoUpgrade php5-bz2Upgrade php5-opcache | Apr 26, 2018 | Jun 20, 2016 |
| Ubuntu | — | Upgrade libgd3Upgrade libgd2-xpmUpgrade libgd2-noxpm | Jul 11, 2016 | Jul 11, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub