This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2016-6128 →
DEBIAN-CVE-2016-6128
The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attacke...
Original description
The description as published by the source.
The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application crash) via an invalid color index.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
libgd2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-29-g3c2b605-1"}]}]
Debian:13
libgd2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-29-g3c2b605-1"}]}]
Debian:14
libgd2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-29-g3c2b605-1"}]}]
References
- advisory security-tracker.debian.org