Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 16.04, 14.04: USN-3060-1 Critical GD Library Denial Of Service

ubuntu
Calendar Grey August 10, 2016
Scroller Ubuntu
Essential Ubuntu Alert USN-3061-1 outlines vulnerabilities in libgd2, which could result in system instability and unauthorized command execution.
The GD library could be made to crash or run programs if it processed a specially crafted image file.

Summary

The GD library could be made to crash or run programs if it processed a

specially crafted image file.

Software Description:

- libgd2: GD Graphics Library

Details:

It was discovered that the GD library incorrectly handled certain malformed

TGA images. If a user or automated system were tricked into processing a

specially crafted TGA image, an attacker could cause a denial of service.

(CVE-2016-6132, CVE-2016-6214)

It was discovered that the GD library incorrectly handled memory when using

gdImageScale(). A remote attacker could possibly use this issue to cause a

denial of service or possibly execute arbitrary code. (CVE-2016-6207)

Topics%20covered

Topics Covered

security advisory denial of service critical command execution ubuntu libgd2 gd library

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  libgd3                          2.1.1-4ubuntu0.16.04.3

Ubuntu 14.04 LTS:
  libgd3                          2.1.0-3ubuntu0.3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3060-1

CVE-2016-6132, CVE-2016-6207, CVE-2016-6214

Severity
critical
Lowest
Low
Medium
High
Critical

August 10, 2016

Topics%20covered

Topics Covered

security advisory denial of service critical command execution ubuntu libgd2 gd library

Package Information

https://launchpad.net/ubuntu/+source/libgd2/2.1.1-4ubuntu0.16.04.3
https://launchpad.net/ubuntu/+source/libgd2/2.1.0-3ubuntu0.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.