UBUNTU-CVE-2016-1903

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2016-1903
Downstream
USN-2952-1
Published: 19 Jan 2016, 00:00
Last modified:22 Apr 2026, 10:34

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.1 CRITICAL
3.0 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

19 Jan 2016, 00:00
Published
Vulnerability first disclosed
22 Apr 2026, 10:34
Last Modified
Vulnerability information updated

Description

The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large bgd_color argument to the imagerotate function.

CVSS Metrics

  • v3.0•CRITICAL•Score: 9.1CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected Systems

  • ubuntu•php5

    < 5.5.9+dfsg-1ubuntu4.16

References (3)