Lucene search
FmsH1:146936HistoryJun 24, 2016 - 3:40 a.m.
Internet Bug Bounty: CVE-2015-8874 Stack overflow with imagefilltoborder
2016-06-2403:40:50
fms
hackerone.com
$500
23
0.035 Low
EPSS
Percentile
91.6%
Reported in 2014
https://bugs.php.net/bug.php?id=66387
A variation was rediscovered this year and reported to PHP and LIBGD:
https://bugs.php.net/bug.php?id=72350
https://github.com/libgd/libgd/issues/215
Patches for both issues:
http://git.php.net/?p=php-src.git;a=commit;h=f96ebb098697908641c6d37e1149cde1f90417fd
https://github.com/php/php-src/commit/6d3fa654b702c8762aa80ab795080f5c4464d677
Fixed in PHP 5.5.37 (security only mode)
http://php.net/ChangeLog-5.php#5.5.37
Fixed in PHP 5.6.23
http://php.net/ChangeLog-5.php#5.6.23
Fixed in PHP 7.0.8
http://php.net/ChangeLog-7.php#7.0.8
Related
osv
osv
CVE-2015-8874
2016-05-16 10:59:00
libgd2 - security update
2016-05-19 00:00:00
alpinelinux
alpinelinux
CVE-2015-8874
2016-05-16 10:59:25
mageia
mageia
Updated libgd packages fix CVE-2015-8874
2016-05-22 01:11:24
Updated libgd packages fix security vulnerability
2016-07-05 18:47:08
openvas
openvas
Debian: Security Advisory (DLA-482-1)
2023-03-08 00:00:00
Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2019-1842)
2020-01-23 00:00:00
Mageia: Security Advisory (MGASA-2016-0203)
2022-01-28 00:00:00
cvelist
cvelist
CVE-2015-8874
2016-05-16 10:00:00
prion
prion
Stack overflow
2016-05-16 10:59:00
debiancve
debiancve
CVE-2015-8874
2016-05-16 10:59:25
f5
f5
K42454663 : PHP vulnerability CVE-2015-8874
2016-06-23 00:00:00
SOL42454663 - PHP vulnerability CVE-2015-8874
2016-06-23 00:00:00
ubuntucve
ubuntucve
CVE-2015-8874
2016-05-16 00:00:00
cve
cve
CVE-2015-8874
2016-05-16 10:59:25
debian
debian
[SECURITY] [DLA 482-1] libgd2 security update
2016-05-19 17:58:42
[SECURITY] [DSA 3587-1] libgd2 security update
2016-05-27 14:53:49
[SECURITY] [DSA 3587-1] libgd2 security update
2016-05-27 14:53:49
nessus
nessus
Debian DLA-482-1 : libgd2 security update
2016-05-20 00:00:00
EulerOS 2.0 SP2 : gd (EulerOS-SA-2019-1842)
2019-09-17 00:00:00
Fedora 23 : gd (2016-d126bb1b74)
2016-07-19 00:00:00
nvd
nvd
CVE-2015-8874
2016-05-16 10:59:25
fedora
fedora
[SECURITY] Fedora 23 Update: gd-2.1.1-8.fc23
2016-07-18 21:03:22
[SECURITY] Fedora 24 Update: gd-2.2.2-1.fc24
2016-06-27 18:41:03
cloudfoundry
cloudfoundry
USN-2987-1 GD library vulnerabilities | Cloud Foundry
2016-06-13 00:00:00
ubuntu
ubuntu
GD library vulnerabilities
2016-05-31 00:00:00
freebsd
freebsd
php -- multiple vulnerabilities
2016-06-23 00:00:00
amazon
amazon
Medium: php55, php56
2016-08-01 13:30:00
fortinet
fortinet
LibGD security advisory [18 January 2017]
2017-07-26 00:00:00
suse
suse
Security update for php5 (important)
2016-06-11 14:14:42
Security update for php53 (important)
2016-06-14 20:07:58
Security update for php53 (important)
2016-06-21 13:08:17
veracode
veracode
Arbitrary Code Execution
2019-05-02 06:02:18
Denial Of Service (DoS) Through Memory Corruption
2019-05-02 06:02:24
Arbitrary Code Execution
2019-05-02 06:02:23
redhat
redhat
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45