CVE-2016-6912
CVE-2016-6912
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via large width and height values.
CVSS 9.8 · Critical · EPSS 4.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libgd2 Debian:12
- Affected ranges
- ECOSYSTEM: < 2.2.4-1
Update to 2.2.4-1
libgd2 Debian:13
- Affected ranges
- ECOSYSTEM: < 2.2.4-1
Update to 2.2.4-1
libgd2 Debian:14
- Affected ranges
- ECOSYSTEM: < 2.2.4-1
Update to 2.2.4-1
libgd2 Ubuntu:14.04:LTS
- Versions
- 2.1.0-2
- 2.1.0-3
- 2.1.0-3ubuntu0.1
- 2.1.0-3ubuntu0.2
- 2.1.0-3ubuntu0.3
- 2.1.0-3ubuntu0.5
- Affected ranges
- ECOSYSTEM: < 2.1.0-3ubuntu0.6
Update to 2.1.0-3ubuntu0.6
libgd2 Ubuntu:16.04:LTS
- Versions
- 2.1.1-4build1
- 2.1.1-4build2
- 2.1.1-4ubuntu0.16.04.1
- 2.1.1-4ubuntu0.16.04.2
- 2.1.1-4ubuntu0.16.04.3
- 2.1.1-4ubuntu0.16.04.5
- Affected ranges
- ECOSYSTEM: < 2.1.1-4ubuntu0.16.04.6
Update to 2.1.1-4ubuntu0.16.04.6