According to the version of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Integer signedness error in the dynamicGetbuf function     in gd_io_dp.c in the GD Graphics Library (aka libgd)     through 2.2.3, as used in PHP before 5.6.28 and 7.x     before 7.0.13, allows remote attackers to cause a     denial of service (stack-based buffer overflow) or     possibly have unspecified other impact via a crafted     imagecreatefromstring call.i1/4^CVE-2016-8670i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for php7 fixes the following security issue :

  - CVE-2016-7568: A specially crafted image file could     cause an application crash or potentially execute     arbitrary code when the image is converted to webp     (bsc#1001900)

  - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf     (bsc#1004924)

  - CVE-2016-6911: Check for out-of-bound read in     dynamicGetbuf() (bsc#1005274)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for php5 fixes the following security issues :

  - CVE-2016-7568: A specially crafted image file could     cause an application crash or potentially execute     arbitrary code when the image is converted to webp     (bsc#1001900)

  - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf     (bsc#1004924)

  - CVE-2016-6911: Check for out-of-bound read in     dynamicGetbuf() (bsc#1005274)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gd fixes the following issues :

  - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf     (bsc#1004924)

  - CVE-2016-6911: Check for out-of-bound read in     dynamicGetbuf() (bsc#1005274)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for php53 fixes the following issues :

  - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf     (bsc#1004924)

  - CVE-2016-6911: Check for out-of-bound read in     dynamicGetbuf() (bsc#1005274)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Heap-based buffer overflow in the horizontalDifference8     function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier     allows remote attackers to cause a denial of service     (crash) or execute arbitrary code via a crafted TIFF     image to tiffcp.(CVE-2016-8670)

  - The gdImageCreate function in the GD Graphics Library     (aka libgd) before 2.2.4 allows remote attackers to     cause a denial of service (system hang) via an     oversized image.(CVE-2016-9317)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for php5 fixes the following issu :

  - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf     (bsc#1004924).

  - CVE-2016-7568: Integer overflow in the gdImageWebpCtx     function in gd_webp.c (libgd) (bsc#1001900).

  - CVE-2016-6911: Check for out-of-bound read in     dynamicGetbuf() (bsc#1005274).

A vulnerability was found in gd. Integer underflow in a calculation in dynamicGetbuf() was incorrectly handled, leading in some circumstances to an out of bounds write through a very large argument to memcpy().
An attacker could create a crafted image that would lead to a crash or, potentially, code execution. (CVE-2016-8670)

Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during __wakeup processing. (CVE-2016-9137)

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value. (CVE-2016-9933)

ext/wddx/wddx.c in PHP before 5.6.28 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.
(CVE-2016-9934)

The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document. (CVE-2016-9935)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
101312	EulerOS 2.0 SP2 : gd (EulerOS-SA-2017-1128)	Nessus	Huawei Local Security Checks	2017/7/10	2025/12/12	critical
119984	SUSE SLES12 Security Update : php7 (SUSE-SU-2016:2683-1)	Nessus	SuSE Local Security Checks	2019/1/2	2024/7/11	critical
119985	SUSE SLES12 Security Update : php5 (SUSE-SU-2016:2766-1)	Nessus	SuSE Local Security Checks	2019/1/2	2024/7/11	critical
94435	SUSE SLES11 Security Update : gd (SUSE-SU-2016:2670-1)	Nessus	SuSE Local Security Checks	2016/10/31	2026/1/20	critical
94455	SUSE SLES11 Security Update : php53 (SUSE-SU-2016:2681-1)	Nessus	SuSE Local Security Checks	2016/11/1	2026/1/20	critical
99890	EulerOS 2.0 SP1 : gd (EulerOS-SA-2017-1045)	Nessus	Huawei Local Security Checks	2017/5/1	2025/12/22	critical
94243	openSUSE Security Update : php5 (openSUSE-2016-1221)	Nessus	SuSE Local Security Checks	2016/10/25	2026/1/21	critical
96805	Amazon Linux AMI : php56 (ALAS-2017-787)	Nessus	Amazon Linux Local Security Checks	2017/1/27	2026/1/2	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical