CVE-2016-6905: Medium severity libgd vulnerability
The readimagetga function in gdtga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6905?
CVE-2016-6905 is classified as a denial of service vulnerability due to an out-of-bounds read in the GD Graphics Library.
How do I fix CVE-2016-6905?
To mitigate CVE-2016-6905, update the GD Graphics Library to version 2.2.3 or later.
Which software versions are affected by CVE-2016-6905?
CVE-2016-6905 affects versions of the GD Graphics Library prior to 2.2.3 and specific versions of openSUSE Leap and openSUSE 13.2.
What does CVE-2016-6905 exploit?
CVE-2016-6905 exploits a vulnerability in the read_image_tga function when handling crafted TGA images.
Who can be impacted by CVE-2016-6905?
Remote attackers can exploit CVE-2016-6905 to cause a denial of service on systems using vulnerable versions of the GD Library.