This update for php5 fixes the following issu :

  - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf     (bsc#1004924).

  - CVE-2016-7568: Integer overflow in the gdImageWebpCtx     function in gd_webp.c (libgd) (bsc#1001900).

  - CVE-2016-6911: Check for out-of-bound read in     dynamicGetbuf() (bsc#1005274).

A vulnerability was found in gd. Integer underflow in a calculation in dynamicGetbuf() was incorrectly handled, leading in some circumstances to an out of bounds write through a very large argument to memcpy().
An attacker could create a crafted image that would lead to a crash or, potentially, code execution. (CVE-2016-8670)

Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during __wakeup processing. (CVE-2016-9137)

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value. (CVE-2016-9933)

ext/wddx/wddx.c in PHP before 5.6.28 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.
(CVE-2016-9934)

The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document. (CVE-2016-9935)

This update for gd fixes the following security issues :

  - CVE-2016-7568: A specially crafted image file could     cause an application crash or potentially execute     arbitrary code when the image is converted to webp     (bsc#1001900)

  - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf     (bsc#1004924)

  - CVE-2016-6911: Check for out-of-bound read in     dynamicGetbuf() (bsc#1005274)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3117-1 advisory.

    Ibrahim El-Sayed discovered that the GD library incorrectly handled certain malformed Tiff images. If a     user or automated system were tricked into processing a specially crafted Tiff image, an attacker could     cause a denial of service. (CVE-2016-6911)

    Ke Liu discovered that the GD library incorrectly handled certain integers when processing WebP images. If     a user or automated system were tricked into processing a specially crafted WebP image, an attacker could     cause a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 14.04     LTS, Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-7568)

    Emmanuel Law discovered that the GD library incorrectly handled certain strings when creating images. If a     user or automated system were tricked into processing a specially crafted image, an attacker could cause a     denial of service, or possibly execute arbitrary code. (CVE-2016-8670)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
94243	openSUSE Security Update : php5 (openSUSE-2016-1221)	Nessus	SuSE Local Security Checks	2016/10/25	2026/1/21	critical
96805	Amazon Linux AMI : php56 (ALAS-2017-787)	Nessus	Amazon Linux Local Security Checks	2017/1/27	2026/1/2	critical
94434	SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2016:2668-1)	Nessus	SuSE Local Security Checks	2016/10/31	2026/1/20	critical
94466	Ubuntu 14.04 LTS / 16.04 LTS : GD library vulnerabilities (USN-3117-1)	Nessus	Ubuntu Local Security Checks	2016/11/2	2024/8/27	critical

偵測

搜尋 Plugin

critical

critical

critical

critical