CVE-2016-6214: Medium severity libgd vulnerability
Published Aug 12, 2016
·Updated
gdtga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.
Affected Software
3 affected components
Libgd Libgd<=2.2.2
Debian Debian Linux=8.0
openSUSE Leap=42.1
Remediation
Event History
Aug 12, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6214?
CVE-2016-6214 has been classified as a high severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2016-6214?
To fix CVE-2016-6214, upgrade your GD Graphics Library to version 2.2.3 or later.
3
What type of attack does CVE-2016-6214 enable?
CVE-2016-6214 enables remote attackers to exploit an out-of-bounds read vulnerability through crafted TGA files.
4
Which versions of libgd are affected by CVE-2016-6214?
Libgd versions prior to 2.2.3, specifically up to and including 2.2.2, are affected by CVE-2016-6214.
5
What operational systems are impacted by CVE-2016-6214?
CVE-2016-6214 impacts specific versions of Debian and openSUSE, including Debian 8.0 and openSUSE Leap 42.1.