Vulnetix
Try Vulnetix Request Demo
CVE-2015-8877 PUBLISHED

The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.

EPSS 2.32% · 84.6th percentile

Risk Scores

EPSS Score
2.32%
84.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibgd20, 2.1.1-4build1, 2.1.1-4build2
Ubuntu:14.04:LTSlibgd20, 2.1.0-2, 2.1.0-3

Timeline

References

Open in Interactive Console →