CVE-2016-5767
Fixed in a distro release EPSS 7%
Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.
Products: libgd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.4 | gd | 2.2.2-r0 |
| Debian 12 | libgd2 | 2.0.34~rc1-1 |
| Debian 13 | libgd2 | 2.0.34~rc1-1 |
| Debian 14 | libgd2 | 2.0.34~rc1-1 |
| Red Hat Enterprise Linux 7 | php | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-bcmath | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-cli | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-common | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-dba | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-debuginfo | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-devel | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-embedded | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-enchant | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-fpm | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-gd | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-intl | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-ldap | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-mbstring | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-mysql | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-mysqlnd | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-odbc | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-pdo | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-pgsql | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-process | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-pspell | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-recode | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-snmp | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-soap | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-xml | 0:5.4.16-42.el7 |
| Red Hat Enterprise Linux 7 | php-xmlrpc | 0:5.4.16-42.el7 |
| Red Hat rhel software collections 2 | rh-php56 | 0:2.3-1.el6 |
| Red Hat rhel software collections 2 | rh-php56 | 0:2.3-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-bcmath | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-bcmath | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-cli | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-cli | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-common | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-common | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-dba | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-dba | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-dbg | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-dbg | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-debuginfo | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-debuginfo | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-devel | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-devel | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-embedded | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-embedded | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-enchant | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-enchant | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-fpm | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-fpm | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-gd | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-gd | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-gmp | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-gmp | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-imap | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-intl | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-intl | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-ldap | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-ldap | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-mbstring | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-mbstring | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-mysqlnd | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-mysqlnd | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-odbc | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-odbc | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-opcache | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-opcache | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-pdo | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-pdo | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-pear | 1:1.9.5-4.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-pear | 1:1.9.5-4.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-pgsql | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-pgsql | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-process | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-process | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-pspell | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-pspell | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-recode | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-recode | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-snmp | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-snmp | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-soap | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-soap | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-tidy | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-xml | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-xml | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-php-xmlrpc | 0:5.6.25-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-php-xmlrpc | 0:5.6.25-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-runtime | 0:2.3-1.el7 |
| Red Hat rhel software collections 2 | rh-php56-runtime | 0:2.3-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-scldevel | 0:2.3-1.el6 |
| Red Hat rhel software collections 2 | rh-php56-scldevel | 0:2.3-1.el7 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | php5 | 5.5.14-68.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | php5 | 5.2.14-0.7.30.89.1 |
| SUSE Linux Enterprise Server 11 SP4 | php53 | 5.3.17-74.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | php53 | 5.3.17-74.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | php53 | 5.3.17-74.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | php5 | 5.5.14-68.1 |