USN-3117-1

Dashboard / Vulnerabilities / USN-3117-1

USN-3117-1

Summary: libgd2 vulnerabilities

Details: Ibrahim El-Sayed discovered that the GD library incorrectly handled certain malformed Tiff images. If a user or automated system were tricked into processing a specially crafted Tiff image, an attacker could cause a denial of service. (CVE-2016-6911) Ke Liu discovered that the GD library incorrectly handled certain integers when processing WebP images. If a user or automated system were tricked into processing a specially crafted WebP image, an attacker could cause a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-7568) Emmanuel Law discovered that the GD library incorrectly handled certain strings when creating images. If a user or automated system were tricked into processing a specially crafted image, an attacker could cause a denial of service, or possibly execute arbitrary code. (CVE-2016-8670)

References: https://ubuntu.com/security/notices/USN-3117-1, https://ubuntu.com/security/CVE-2016-6911, https://ubuntu.com/security/CVE-2016-7568, https://ubuntu.com/security/CVE-2016-8670