CNVD-2016-03817 | Vulnetix

CNVD-2016-03817 PUBLISHED

Record from circl · Published May 30, 2016

libgd（又名GD Graphics Library或libgd2）是美国软件开发者Thomas Boutell所研发的一个开源的用于动态创建图像的库，它支持创建图表、图形和缩略图等。 libgd的‘gdCtxPrintf’函数中存在内存泄露漏洞，该漏洞源于程序未检查‘vsnprintf’函数的返回值，PHP 5.5版本将输出指定的长度值。攻击者可利用该漏洞造成内存数据泄露。

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CNVD-2016-03817
vulnetix vdb fixes CNVD-2016-03817

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CNVD-2016-03817/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →