Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-gd | Aug 30, 2017 | Aug 7, 2016 | |
| Amazon_linux | — | amazon-linux-upgrade--php56amazon-linux-upgrade-php55 | Aug 1, 2016 | Aug 1, 2016 |
| Centos_linux | — | centos-upgrade-phpcentos-upgrade-php-bcmathcentos-upgrade-php-clicentos-upgrade-php-commoncentos-upgrade-php-dbacentos-upgrade-php-debuginfocentos-upgrade-php-develcentos-upgrade-php-embeddedcentos-upgrade-php-enchantcentos-upgrade-php-fpmcentos-upgrade-php-gdcentos-upgrade-php-intlcentos-upgrade-php-ldapcentos-upgrade-php-mbstringcentos-upgrade-php-mysqlcentos-upgrade-php-mysqlndcentos-upgrade-php-odbccentos-upgrade-php-pdocentos-upgrade-php-pgsqlcentos-upgrade-php-processcentos-upgrade-php-pspellcentos-upgrade-php-recodecentos-upgrade-php-snmpcentos-upgrade-php-soapcentos-upgrade-php-xmlcentos-upgrade-php-xmlrpc | Jun 23, 2020 | Aug 7, 2016 |
| Debian | debian-upgrade-libgd2 | Jul 30, 2024 | Aug 7, 2016 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Oct 19, 2016 | |
| Freebsd | freebsd-upgrade-package-php55freebsd-upgrade-package-php55-gdfreebsd-upgrade-package-php55-mbstringfreebsd-upgrade-package-php55-wddxfreebsd-upgrade-package-php55-zipfreebsd-upgrade-package-php56freebsd-upgrade-package-php56-gdfreebsd-upgrade-package-php56-mbstringfreebsd-upgrade-package-php56-pharfreebsd-upgrade-package-php56-wddxfreebsd-upgrade-package-php56-zipfreebsd-upgrade-package-php70freebsd-upgrade-package-php70-gdfreebsd-upgrade-package-php70-mbstringfreebsd-upgrade-package-php70-pharfreebsd-upgrade-package-php70-wddxfreebsd-upgrade-package-php70-zip | Dec 10, 2025 | Jun 25, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-phphuawei-euleros-2_0_sp1-upgrade-php-clihuawei-euleros-2_0_sp1-upgrade-php-commonhuawei-euleros-2_0_sp1-upgrade-php-gdhuawei-euleros-2_0_sp1-upgrade-php-ldaphuawei-euleros-2_0_sp1-upgrade-php-mysqlhuawei-euleros-2_0_sp1-upgrade-php-odbchuawei-euleros-2_0_sp1-upgrade-php-pdohuawei-euleros-2_0_sp1-upgrade-php-pgsqlhuawei-euleros-2_0_sp1-upgrade-php-processhuawei-euleros-2_0_sp1-upgrade-php-recodehuawei-euleros-2_0_sp1-upgrade-php-soaphuawei-euleros-2_0_sp1-upgrade-php-xmlhuawei-euleros-2_0_sp1-upgrade-php-xmlrpc | Nov 30, 2017 | Aug 7, 2016 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0 | Oct 19, 2018 | Aug 7, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-phporacle-linux-upgrade-php-bcmathoracle-linux-upgrade-php-clioracle-linux-upgrade-php-commonoracle-linux-upgrade-php-dbaoracle-linux-upgrade-php-develoracle-linux-upgrade-php-embeddedoracle-linux-upgrade-php-enchantoracle-linux-upgrade-php-fpmoracle-linux-upgrade-php-gdoracle-linux-upgrade-php-intloracle-linux-upgrade-php-ldaporacle-linux-upgrade-php-mbstringoracle-linux-upgrade-php-mysqloracle-linux-upgrade-php-mysqlndoracle-linux-upgrade-php-odbcoracle-linux-upgrade-php-pdooracle-linux-upgrade-php-pgsqloracle-linux-upgrade-php-processoracle-linux-upgrade-php-pspelloracle-linux-upgrade-php-recodeoracle-linux-upgrade-php-snmporacle-linux-upgrade-php-soaporacle-linux-upgrade-php-xmloracle-linux-upgrade-php-xmlrpc | Nov 9, 2016 | Jun 23, 2016 |
| Php | php-upgrade-5_5_37php-upgrade-5_6_23 | Sep 30, 2019 | Aug 7, 2016 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-phpredhat-upgrade-php-bcmathredhat-upgrade-php-cliredhat-upgrade-php-commonredhat-upgrade-php-dbaredhat-upgrade-php-debuginforedhat-upgrade-php-develredhat-upgrade-php-embeddedredhat-upgrade-php-enchantredhat-upgrade-php-fpmredhat-upgrade-php-gdredhat-upgrade-php-intlredhat-upgrade-php-ldapredhat-upgrade-php-mbstringredhat-upgrade-php-mysqlredhat-upgrade-php-mysqlndredhat-upgrade-php-odbcredhat-upgrade-php-pdoredhat-upgrade-php-pgsqlredhat-upgrade-php-processredhat-upgrade-php-pspellredhat-upgrade-php-recoderedhat-upgrade-php-snmpredhat-upgrade-php-soapredhat-upgrade-php-xmlredhat-upgrade-php-xmlrpc | Nov 4, 2016 | Aug 7, 2016 | |
| Suse | — | suse-upgrade-apache2-mod_php5suse-upgrade-apache2-mod_php53suse-upgrade-php5suse-upgrade-php5-bcmathsuse-upgrade-php5-bz2suse-upgrade-php5-calendarsuse-upgrade-php5-ctypesuse-upgrade-php5-curlsuse-upgrade-php5-dbasuse-upgrade-php5-dbasesuse-upgrade-php5-develsuse-upgrade-php5-domsuse-upgrade-php5-enchantsuse-upgrade-php5-exifsuse-upgrade-php5-fastcgisuse-upgrade-php5-fileinfosuse-upgrade-php5-fpmsuse-upgrade-php5-ftpsuse-upgrade-php5-gdsuse-upgrade-php5-gettextsuse-upgrade-php5-gmpsuse-upgrade-php5-hashsuse-upgrade-php5-iconvsuse-upgrade-php5-imapsuse-upgrade-php5-intlsuse-upgrade-php5-jsonsuse-upgrade-php5-ldapsuse-upgrade-php5-mbstringsuse-upgrade-php5-mcryptsuse-upgrade-php5-mysqlsuse-upgrade-php5-odbcsuse-upgrade-php5-opcachesuse-upgrade-php5-opensslsuse-upgrade-php5-pcntlsuse-upgrade-php5-pdosuse-upgrade-php5-pearsuse-upgrade-php5-pgsqlsuse-upgrade-php5-pharsuse-upgrade-php5-posixsuse-upgrade-php5-pspellsuse-upgrade-php5-shmopsuse-upgrade-php5-snmpsuse-upgrade-php5-soapsuse-upgrade-php5-socketssuse-upgrade-php5-sqlitesuse-upgrade-php5-suhosinsuse-upgrade-php5-sysvmsgsuse-upgrade-php5-sysvsemsuse-upgrade-php5-sysvshmsuse-upgrade-php5-tokenizersuse-upgrade-php5-wddxsuse-upgrade-php5-xmlreadersuse-upgrade-php5-xmlrpcsuse-upgrade-php5-xmlwritersuse-upgrade-php5-xslsuse-upgrade-php5-zipsuse-upgrade-php5-zlibsuse-upgrade-php53suse-upgrade-php53-bcmathsuse-upgrade-php53-bz2suse-upgrade-php53-calendarsuse-upgrade-php53-ctypesuse-upgrade-php53-curlsuse-upgrade-php53-dbasuse-upgrade-php53-develsuse-upgrade-php53-domsuse-upgrade-php53-exifsuse-upgrade-php53-fastcgisuse-upgrade-php53-fileinfosuse-upgrade-php53-ftpsuse-upgrade-php53-gdsuse-upgrade-php53-gettextsuse-upgrade-php53-gmpsuse-upgrade-php53-iconvsuse-upgrade-php53-imapsuse-upgrade-php53-intlsuse-upgrade-php53-jsonsuse-upgrade-php53-ldapsuse-upgrade-php53-mbstringsuse-upgrade-php53-mcryptsuse-upgrade-php53-mysqlsuse-upgrade-php53-odbcsuse-upgrade-php53-opensslsuse-upgrade-php53-pcntlsuse-upgrade-php53-pdosuse-upgrade-php53-pearsuse-upgrade-php53-pgsqlsuse-upgrade-php53-posixsuse-upgrade-php53-pspellsuse-upgrade-php53-readlinesuse-upgrade-php53-shmopsuse-upgrade-php53-snmpsuse-upgrade-php53-soapsuse-upgrade-php53-socketssuse-upgrade-php53-sqlitesuse-upgrade-php53-suhosinsuse-upgrade-php53-sysvmsgsuse-upgrade-php53-sysvsemsuse-upgrade-php53-sysvshmsuse-upgrade-php53-tidysuse-upgrade-php53-tokenizersuse-upgrade-php53-wddxsuse-upgrade-php53-xmlreadersuse-upgrade-php53-xmlrpcsuse-upgrade-php53-xmlwritersuse-upgrade-php53-xslsuse-upgrade-php53-zipsuse-upgrade-php53-zlib | Jul 26, 2016 | Jul 20, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub