VDB
DEBIAN-CVE-2016-9933
DEBIAN-CVE-2016-9933
PUBLISHED
CVSS 7.5 HIGH
Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value.
Risk Scores
CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | libgd2 | 0 |
| Debian:12 | libgd2 | 0 |
| Debian:14 | libgd2 | 0 |
Timeline
- Jan 4, 2017 CVE Published
- Sep 22, 2026 CVE Updated