The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large bgd_color argument to the imagerotate function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Jan 19, 2016 |
| Php | — | Upgrade to PHP version 7.0.2Upgrade to PHP version 5.6.17Upgrade to PHP version 5.5.31 | Feb 1, 2016 | Jan 19, 2016 |
| Suse | — | Upgrade php5-snmpUpgrade php5-gmpUpgrade php5-ldapUpgrade php5-iconvUpgrade php5-domUpgrade php5-mbstringUpgrade php5-bz2Upgrade php5-ctypeUpgrade php5-xmlreaderUpgrade php5-xslUpgrade php5-sysvsemUpgrade php5-soapUpgrade php5-odbcUpgrade php5-xmlrpcUpgrade php5-jsonUpgrade php5-opensslUpgrade php5-shmopUpgrade php5-sqliteUpgrade php5-exifUpgrade php5-curlUpgrade php5-pdoUpgrade php5-socketsUpgrade php5-sysvmsgUpgrade php5-mcryptUpgrade php5-ftpUpgrade php5-pearUpgrade php5-gettextUpgrade php5-gdUpgrade php5-fpmUpgrade php5-enchantUpgrade php5-posixUpgrade php5-zipUpgrade php5-calendarUpgrade php5-wddxUpgrade php5-zlibUpgrade php5-opcacheUpgrade php5-fastcgiUpgrade apache2-mod_php5Upgrade php5-pcntlUpgrade php5-tokenizerUpgrade php5-mysqlUpgrade php5-dbaUpgrade php5Upgrade php5-sysvshmUpgrade php5-fileinfoUpgrade php5-bcmathUpgrade php5-pspellUpgrade php5-develUpgrade php5-xmlwriterUpgrade php5-pgsqlUpgrade php5-intlUpgrade php5-suhosin | Feb 2, 2016 | Jan 19, 2016 |
| Ubuntu | — | Upgrade php5-cliUpgrade php5-mysqlndUpgrade php5-fpmUpgrade php5-gdUpgrade libapache2-mod-php5Upgrade php5-snmpUpgrade php5-cgi | Apr 21, 2016 | Jan 19, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub