{"id":"CVE-2016-6161","aliases":["ALPINE-CVE-2016-6161","DEBIAN-CVE-2016-6161","DLA-563-1","DSA-3619-1","EUVD-2016-7095","GHSA-gq8p-8q2h-mv7w","SUSE-SU-2016:2302-1","SUSE-SU-2016:2303-1","SUSE-SU-2016:2408-1","SUSE-SU-2016:2460-1","SUSE-SU-2016:2460-2","UBUNTU-CVE-2016-6161","USN-3030-1"],"status":"published","title":"The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote...","description":"The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02885,"percentile":0.86959,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2016-07-06T00:00:00Z","modified":"2026-10-20T10:47:29Z","fixes":[{"ecosystem":"Alpine:v3.2","package":"gd","fixed_in":["2.2.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"gd","fixed_in":["2.2.1-r2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libgd2","fixed_in":["2.2.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libgd2","fixed_in":["2.2.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libgd2","fixed_in":["2.2.1-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libgd2","fixed_in":["2.0.36~rc1~dfsg-6.1+deb7u5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"gd","fixed_in":["2.0.36.RC1-52.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"gd","fixed_in":["2.0.36.RC1-52.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"gd","fixed_in":["2.0.36.RC1-52.22.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libgd2","fixed_in":["2.1.0-3ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libgd2","fixed_in":["2.1.1-4ubuntu0.16.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.2","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-r2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.36~rc1~dfsg-6.1+deb7u5"}]}],"versions":["2.0.36~rc1~dfsg-6.1","2.0.36~rc1~dfsg-6.1+deb7u1","2.0.36~rc1~dfsg-6.1+deb7u2","2.0.36~rc1~dfsg-6.1+deb7u3","2.0.36~rc1~dfsg-6.1+deb7u4"]},{"source":"osv","ecosystem":"Debian:8","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-5+deb8u4"}]}],"versions":["2.1.0-5","2.1.0-5+deb8u1","2.1.0-5+deb8u2","2.1.0-5+deb8u3"],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.36.RC1-52.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.36.RC1-52.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.36.RC1-52.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-73.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-73.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-15.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-15.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-15.1"}]}],"bundled":29},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.2"}]}],"versions":["2.1.0-2","2.1.0-3","2.1.0-3ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.2"}]}],"versions":["2.1.1-4build1","2.1.1-4build2","2.1.1-4ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.2"}]}],"versions":["2.1.0-2","2.1.0-3","2.1.0-3ubuntu0.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libgd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-4ubuntu0.16.04.2"}]}],"versions":["2.1.1-4build1","2.1.1-4build2","2.1.1-4ubuntu0.16.04.1"],"bundled":5}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"libgd","product":"libgd"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://github.com/libgd/libgd/issues/209","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/05/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/05/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3619","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3030-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6161"},{"url":"https://github.com/advisories/GHSA-gq8p-8q2h-mv7w"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-6161","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-6161","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162302-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/988032","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6161","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162303-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/982176","tags":["report"]},{"url":"https://bugzilla.suse.com/987577","tags":["report"]},{"url":"https://bugzilla.suse.com/991436","tags":["report"]},{"url":"https://bugzilla.suse.com/991622","tags":["report"]},{"url":"https://bugzilla.suse.com/991710","tags":["report"]},{"url":"https://bugzilla.suse.com/995034","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6905","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162408-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/987530","tags":["report"]},{"url":"https://bugzilla.suse.com/987580","tags":["report"]},{"url":"https://bugzilla.suse.com/991422","tags":["report"]},{"url":"https://bugzilla.suse.com/991424","tags":["report"]},{"url":"https://bugzilla.suse.com/991426","tags":["report"]},{"url":"https://bugzilla.suse.com/991427","tags":["report"]},{"url":"https://bugzilla.suse.com/991428","tags":["report"]},{"url":"https://bugzilla.suse.com/991429","tags":["report"]},{"url":"https://bugzilla.suse.com/991430","tags":["report"]},{"url":"https://bugzilla.suse.com/991433","tags":["report"]},{"url":"https://bugzilla.suse.com/991434","tags":["report"]},{"url":"https://bugzilla.suse.com/991437","tags":["report"]},{"url":"https://bugzilla.suse.com/997206","tags":["report"]},{"url":"https://bugzilla.suse.com/997207","tags":["report"]},{"url":"https://bugzilla.suse.com/997208","tags":["report"]},{"url":"https://bugzilla.suse.com/997210","tags":["report"]},{"url":"https://bugzilla.suse.com/997211","tags":["report"]},{"url":"https://bugzilla.suse.com/997220","tags":["report"]},{"url":"https://bugzilla.suse.com/997225","tags":["report"]},{"url":"https://bugzilla.suse.com/997230","tags":["report"]},{"url":"https://bugzilla.suse.com/997248","tags":["report"]},{"url":"https://bugzilla.suse.com/997257","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7134","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162460-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1001950","tags":["report"]},{"url":"https://bugzilla.suse.com/995512","tags":["report"]},{"url":"https://bugzilla.suse.com/997247","tags":["report"]},{"url":"https://bugzilla.suse.com/999313","tags":["report"]},{"url":"https://bugzilla.suse.com/999679","tags":["report"]},{"url":"https://bugzilla.suse.com/999680","tags":["report"]},{"url":"https://bugzilla.suse.com/999684","tags":["report"]},{"url":"https://bugzilla.suse.com/999685","tags":["report"]},{"url":"https://bugzilla.suse.com/999819","tags":["report"]},{"url":"https://bugzilla.suse.com/999820","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7418","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162460-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-6161","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3030-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-7456","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-5766","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-6128","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-6161","description":"The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.","status":"published","published":"2016-08-12T15:00:00Z","modified":"2024-08-06T01:22:20.577Z","updated_at":"2026-11-02T14:33:34.443637Z"}],"euvd":[{"id":"EUVD-2016-7095","description":"The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.","status":"published","published":"2016-08-12T15:00:00Z","modified":"2024-08-06T01:22:20Z","updated_at":"2026-11-03T02:22:40.469928Z"}],"ghsa":[{"id":"GHSA-gq8p-8q2h-mv7w","title":"The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote...","description":"The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.","status":"published","published":"2022-05-14T02:12:20Z","modified":"2023-02-02T05:05:22Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:52:06.092141Z"}],"nvd":[{"id":"CVE-2016-6161","description":"The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.","status":"published","published":"2016-08-12T15:59:02.29Z","modified":"2026-06-17T00:50:33.567Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:03:28.854267Z"}],"osv":[{"id":"ALPINE-CVE-2016-6161","description":"The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.","status":"published","published":"2016-08-12T15:59:02.29Z","modified":"2026-09-22T06:30:37.327013991Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"CVE-2016-6161","description":"The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.","status":"published","published":"2016-08-12T15:59:02.29Z","modified":"2026-10-20T10:47:29.602368111Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:02.776224Z"},{"id":"DEBIAN-CVE-2016-6161","description":"The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.","status":"published","published":"2016-08-12T15:59:02.29Z","modified":"2026-09-22T07:01:33.681130767Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:27.910042Z"},{"id":"UBUNTU-CVE-2016-6161","description":"The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.","status":"published","published":"2016-07-06T00:00:00Z","modified":"2026-04-22T10:54:19.807974Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:12.642042Z"},{"id":"DLA-563-1","title":"libgd2 - security update","status":"published","published":"2016-07-26T00:00:00Z","modified":"2026-03-09T02:08:31.710174Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3619-1","title":"libgd2 - security update","status":"published","published":"2016-07-15T00:00:00Z","modified":"2026-03-09T01:18:02.770224Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"SUSE-SU-2016:2302-1","title":"Security update for gd","description":"\nThis update for gd fixes the following issues:\n\n- security update:\n  * CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif [bsc#988032]\n","status":"published","published":"2016-09-14T07:11:02Z","modified":"2026-02-04T03:18:10.785796Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2303-1","title":"Security update for gd","description":"\nThis update for gd fixes the following issues:\n\n  * CVE-2016-6214: Buffer over-read issue when parsing crafted TGA file [bsc#991436]\n  * CVE-2016-6132: read out-of-bands was found in the parsing of TGA files using libgd [bsc#987577]\n  * CVE-2016-6128: Invalid color index not properly handled [bsc#991710]\n  * CVE-2016-6207: Integer overflow error within _gdContributionsAlloc() [bsc#991622]\n  * CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif [bsc#988032]\n  * CVE-2016-5116: avoid stack overflow (read) with large names [bsc#982176]\n  * CVE-2016-6905: Out-of-bounds read in function read_image_tga in gd_tga.c [bsc#995034]\n\n","status":"published","published":"2016-09-14T07:12:19Z","modified":"2026-02-04T03:56:49.945768Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2408-1","title":"Security update for php5","description":"\nThis update for php5 fixes the following security issues:\n\n* CVE-2016-6128: Invalid color index not properly handled [bsc#987580]\n* CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif [bsc#988032]\n* CVE-2016-6292: Null pointer dereference in exif_process_user_comment [bsc#991422]\n* CVE-2016-6295: Use after free in SNMP with GC and unserialize() [bsc#991424]\n* CVE-2016-6297: Stack-based buffer overflow vulnerability in php_stream_zip_opener [bsc#991426]\n* CVE-2016-6291: Out-of-bounds access in exif_process_IFD_in_MAKERNOTE [bsc#991427]\n* CVE-2016-6289: Integer overflow leads to buffer overflow in virtual_file_ex [bsc#991428]\n* CVE-2016-6290: Use after free in unserialize() with Unexpected Session Deserialization [bsc#991429]\n* CVE-2016-5399: Improper error handling in bzread() [bsc#991430]\n* CVE-2016-6296: Heap buffer overflow vulnerability in simplestring_addn in simplestring.c [bsc#991437]\n* CVE-2016-6207: Integer overflow error within _gdContributionsAlloc() [bsc#991434]\n* CVE-2014-3587: Integer overflow in the cdf_read_property_info affecting SLES11 SP3 [bsc#987530]\n* CVE-2016-6288: Buffer over-read in php_url_parse_ex [bsc#991433]\n* CVE-2016-7124: Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization\n* CVE-2016-7125: PHP Session Data Injection Vulnerability\n* CVE-2016-7126: select_colors write out-of-bounds\n* CVE-2016-7127: imagegammacorrect allowed arbitrary write access\n* CVE-2016-7128: Memory Leakage In exif_process_IFD_in_TIFF\n* CVE-2016-7129: wddx_deserialize allowed illegal memory access\n* CVE-2016-7130: wddx_deserialize null dereference\n* CVE-2016-7131: wddx_deserialize null dereference with invalid xml\n* CVE-2016-7132: wddx_deserialize null dereference in php_wddx_pop_element\n* CVE-2016-7134: Heap overflow in the function curl_escape\n","status":"published","published":"2016-09-28T09:32:31Z","modified":"2026-02-04T04:12:33.713244Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2460-1","title":"Security update for php7","description":"\nThis update for php7 fixes the following security issues:\n\n* CVE-2016-6128: Invalid color index not properly handled [bsc#987580]\n* CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif [bsc#988032]\n* CVE-2016-6292: Null pointer dereference in exif_process_user_comment [bsc#991422]\n* CVE-2016-6295: Use after free in SNMP with GC and unserialize() [bsc#991424]\n* CVE-2016-6297: Stack-based buffer overflow vulnerability in php_stream_zip_opener [bsc#991426]\n* CVE-2016-6291: Out-of-bounds access in exif_process_IFD_in_MAKERNOTE [bsc#991427]\n* CVE-2016-6289: Integer overflow leads to buffer overflow in virtual_file_ex [bsc#991428]\n* CVE-2016-6290: Use after free in unserialize() with Unexpected Session Deserialization [bsc#991429]\n* CVE-2016-5399: Improper error handling in bzread() [bsc#991430]\n* CVE-2016-6296: Heap buffer overflow vulnerability in simplestring_addn in simplestring.c [bsc#991437]\n* CVE-2016-6207: Integer overflow error within _gdContributionsAlloc() [bsc#991434]\n* CVE-2016-4473: Invalid free() instead of efree() in phar_extract_file()\n* CVE-2016-7124: Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization\n* CVE-2016-7125: PHP Session Data Injection Vulnerability\n* CVE-2016-7126: select_colors write out-of-bounds\n* CVE-2016-7127: imagegammacorrect allowed arbitrary write access\n* CVE-2016-7128: Memory Leakage In exif_process_IFD_in_TIFF\n* CVE-2016-7129: wddx_deserialize allowed illegal memory access\n* CVE-2016-7131: wddx_deserialize null dereference with invalid xml\n* CVE-2016-7132: wddx_deserialize null dereference in php_wddx_pop_element\n* CVE-2016-7133: memory allocator fails to realloc small block to large one\n* CVE-2016-7134: Heap overflow in the function curl_escape\n* CVE-2016-7130: wddx_deserialize null dereference\n* CVE-2016-7413: Use after free in wddx_deserialize\n* CVE-2016-7412: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field\n* CVE-2016-7417: Missing type check when unserializing SplArray\n* CVE-2016-7416: Stack based buffer overflow in msgfmt_format_message\n* CVE-2016-7418: Null pointer dereference in php_wddx_push_element\n* CVE-2016-7414: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile\n","status":"published","published":"2016-10-05T15:19:24Z","modified":"2026-02-04T04:33:21.660597Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2460-2","title":"Security update for php7","description":"\nThis update for php7 fixes the following security issues:\n\n* CVE-2016-6128: Invalid color index not properly handled [bsc#987580]\n* CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif [bsc#988032]\n* CVE-2016-6292: Null pointer dereference in exif_process_user_comment [bsc#991422]\n* CVE-2016-6295: Use after free in SNMP with GC and unserialize() [bsc#991424]\n* CVE-2016-6297: Stack-based buffer overflow vulnerability in php_stream_zip_opener [bsc#991426]\n* CVE-2016-6291: Out-of-bounds access in exif_process_IFD_in_MAKERNOTE [bsc#991427]\n* CVE-2016-6289: Integer overflow leads to buffer overflow in virtual_file_ex [bsc#991428]\n* CVE-2016-6290: Use after free in unserialize() with Unexpected Session Deserialization [bsc#991429]\n* CVE-2016-5399: Improper error handling in bzread() [bsc#991430]\n* CVE-2016-6296: Heap buffer overflow vulnerability in simplestring_addn in simplestring.c [bsc#991437]\n* CVE-2016-6207: Integer overflow error within _gdContributionsAlloc() [bsc#991434]\n* CVE-2016-4473: Invalid free() instead of efree() in phar_extract_file()\n* CVE-2016-7124: Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization\n* CVE-2016-7125: PHP Session Data Injection Vulnerability\n* CVE-2016-7126: select_colors write out-of-bounds\n* CVE-2016-7127: imagegammacorrect allowed arbitrary write access\n* CVE-2016-7128: Memory Leakage In exif_process_IFD_in_TIFF\n* CVE-2016-7129: wddx_deserialize allowed illegal memory access\n* CVE-2016-7131: wddx_deserialize null dereference with invalid xml\n* CVE-2016-7132: wddx_deserialize null dereference in php_wddx_pop_element\n* CVE-2016-7133: memory allocator fails to realloc small block to large one\n* CVE-2016-7134: Heap overflow in the function curl_escape\n* CVE-2016-7130: wddx_deserialize null dereference\n* CVE-2016-7413: Use after free in wddx_deserialize\n* CVE-2016-7412: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field\n* CVE-2016-7417: Missing type check when unserializing SplArray\n* CVE-2016-7416: Stack based buffer overflow in msgfmt_format_message\n* CVE-2016-7418: Null pointer dereference in php_wddx_push_element\n* CVE-2016-7414: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile\n","status":"published","published":"2016-10-05T15:19:17Z","modified":"2026-02-04T03:47:31.22726Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"USN-3030-1","title":"libgd2 vulnerabilities","description":"It was discovered that the GD library incorrectly handled memory when using\ngdImageScaleTwoPass(). A remote attacker could possibly use this issue to\ncause a denial of service. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2013-7456)\n\nIt was discovered that the GD library incorrectly handled certain malformed\nXBM images. If a user or automated system were tricked into processing a\nspecially crafted XBM image, an attacker could cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS, Ubuntu 15.10 and Ubuntu 16.04\nLTS. (CVE-2016-5116)\n\nIt was discovered that the GD library incorrectly handled memory when using\n_gd2GetHeader(). A remote attacker could possibly use this issue to cause a\ndenial of service or possibly execute arbitrary code. (CVE-2016-5766)\n\nIt was discovered that the GD library incorrectly handled certain color\nindexes. A remote attacker could possibly use this issue to cause a denial\nof service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 15.10 and\nUbuntu 16.04 LTS. (CVE-2016-6128)\n\nIt was discovered that the GD library incorrectly handled memory when\nencoding a GIF image. A remote attacker could possibly use this issue to\ncause a denial of service. (CVE-2016-6161)\n","status":"published","published":"2016-07-11T16:47:45Z","modified":"2026-04-22T09:25:54.897263Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}