Lucene search
F5F5:K40564589HistoryDec 07, 2016 - 12:00 a.m.
K40564589 : PHP vulnerability CVE-2016-7126
2016-12-0700:00:00
my.f5.com
14
Security Advisory Description
The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate the number of colors, which allows remote attackers to cause a denial of service (select_colors allocation error and out-of-bounds write) or possibly have unspecified other impact via a large value in the third argument. (CVE-2016-7126)
Impact
An attacker can cause a denial of service (DoS).
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 | |
| big-ip afm | eq | 12.0.0 |
Related
prion
prion
Out-of-bounds
2016-09-12 01:59:00
debiancve
debiancve
CVE-2016-7126
2016-09-12 01:59:04
cve
cve
CVE-2016-7126
2016-09-12 01:59:04
redhatcve
redhatcve
CVE-2016-7126
2016-09-09 13:18:47
ubuntucve
ubuntucve
CVE-2016-7126
2016-09-12 00:00:00
cvelist
cvelist
CVE-2016-7126
2016-09-12 01:00:00
nvd
nvd
CVE-2016-7126
2016-09-12 01:59:04
f5
f5
K89002224 : PHP vulnerability CVE-2016-7127
2016-12-07 00:00:00
nessus
nessus
Tenable SecurityCenter PHP < 5.6.25 Multiple Vulnerabilities (TNS-2016-09)
2017-06-26 00:00:00
PHP 5.6.x < 5.6.25 Multiple Vulnerabilities
2016-08-23 00:00:00
Slackware 14.0 / 14.1 / 14.2 / current : php (SSA:2016-252-01)
2016-09-09 00:00:00
openvas
openvas
PHP Multiple Vulnerabilities - 02 (Sep 2016) - Linux
2016-09-12 00:00:00
openSUSE: Security Advisory for php5 (openSUSE-SU-2016:2337-1)
2016-09-20 00:00:00
PHP Multiple Vulnerabilities - 02 (Sep 2016) - Windows
2016-09-12 00:00:00
slackware
slackware
[slackware-security] php
2016-09-08 22:38:27
suse
suse
Security update for php5 (important)
2016-09-19 19:09:23
Security update for php53 (important)
2016-10-05 18:12:21
Security update for php53 (important)
2016-09-16 21:09:09
ibm
ibm
debian
debian
[SECURITY] [DSA 3689-1] php5 security update
2016-10-08 13:53:04
[SECURITY] [DSA 3689-1] php5 security update
2016-10-08 13:53:04
gentoo
gentoo
PHP: Multiple vulnerabilities
2016-11-30 00:00:00
veracode
veracode
Out-Of-Bounds Read
2019-05-02 06:02:24
Arbitrary Code Execution
2019-05-02 06:02:23
Denial Of Service (DoS)
2019-05-02 06:02:21
redhat
redhat
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45