CVE-2015-8877: High severity libgd vulnerability
The gdImageScaleTwoPass function in gdinterpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What systems are affected by CVE-2015-8877?
CVE-2015-8877 affects versions of the GD Graphics Library before 2.2.0 and PHP versions before 5.6.12.
What is the impact of CVE-2015-8877?
The impact of CVE-2015-8877 is a denial of service due to memory consumption caused by remote attackers.
How do I mitigate CVE-2015-8877?
To mitigate CVE-2015-8877, upgrade GD Graphics Library to version 2.2.0 or higher and PHP to version 5.6.12 or higher.
What is the CVSS score for CVE-2015-8877?
The CVSS score for CVE-2015-8877 reflects its potential denial of service impact, but specific score details may vary.
Is CVE-2015-8877 exploitable remotely?
Yes, CVE-2015-8877 is exploitable remotely as it allows attackers to trigger the vulnerability through crafted calls.