CVE-2016-6161: Medium severity libgd vulnerability
Published Aug 12, 2016
·Updated
The output function in gdgifout.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.
Affected Software
3 affected components
Libgd Libgd<=2.2.2
Debian Debian Linux=8.0
openSUSE Leap=42.1
Event History
Aug 12, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6161?
CVE-2016-6161 has been classified with a medium severity rating due to its potential to cause denial of service.
2
How do I fix CVE-2016-6161?
To fix CVE-2016-6161, update libgd to version 2.2.3 or later, which resolves the vulnerability.
3
Which software versions are affected by CVE-2016-6161?
CVE-2016-6161 affects libgd versions up to and including 2.2.2 and specific versions of Debian and openSUSE.
4
What kind of attack does CVE-2016-6161 enable?
CVE-2016-6161 enables remote attackers to conduct denial of service attacks via crafted images.
5
Is CVE-2016-6161 a remote code execution vulnerability?
No, CVE-2016-6161 is not a remote code execution vulnerability but a denial of service vulnerability.