Test ID:	1.3.6.1.4.1.25623.1.0.843069
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3213-1)
Summary:	The remote host is missing an update for the 'libgd2' package(s) announced via the USN-3213-1 advisory.
Description:	Summary: The remote host is missing an update for the 'libgd2' package(s) announced via the USN-3213-1 advisory. Vulnerability Insight: Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were tricked into processing a specially crafted image, an attacker could cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-10166) It was discovered that the GD library incorrectly handled certain malformed images. If a user or automated system were tricked into processing a specially crafted image, an attacker could cause a denial of service. (CVE-2016-10167) It was discovered that the GD library incorrectly handled certain malformed images. If a user or automated system were tricked into processing a specially crafted image, an attacker could cause a denial of service, or possibly execute arbitrary code. (CVE-2016-10168) Ibrahim El-Sayed discovered that the GD library incorrectly handled certain malformed TGA images. If a user or automated system were tricked into processing a specially crafted TGA image, an attacker could cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-6906) Ibrahim El-Sayed discovered that the GD library incorrectly handled certain malformed WebP images. If a user or automated system were tricked into processing a specially crafted WebP image, an attacker could cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-6912) It was discovered that the GD library incorrectly handled creating oversized images. If a user or automated system were tricked into creating a specially crafted image, an attacker could cause a denial of service. (CVE-2016-9317) It was discovered that the GD library incorrectly handled filling certain images. If a user or automated system were tricked into filling an image, an attacker could cause a denial of service. (CVE-2016-9933) Affected Software/OS: 'libgd2' package(s) on Ubuntu 12.04, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 16.10. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10166 BugTraq ID: 95869 http://www.securityfocus.com/bid/95869 Debian Security Information: DSA-3777 (Google Search) http://www.debian.org/security/2017/dsa-3777 http://www.openwall.com/lists/oss-security/2017/01/26/1 http://www.openwall.com/lists/oss-security/2017/01/28/6 RedHat Security Advisories: RHSA-2019:2519 https://access.redhat.com/errata/RHSA-2019:2519 RedHat Security Advisories: RHSA-2019:3299 https://access.redhat.com/errata/RHSA-2019:3299 Common Vulnerability Exposure (CVE) ID: CVE-2016-10167 RedHat Security Advisories: RHSA-2017:3221 https://access.redhat.com/errata/RHSA-2017:3221 RedHat Security Advisories: RHSA-2018:1296 https://access.redhat.com/errata/RHSA-2018:1296 http://www.securitytracker.com/id/1037659 Common Vulnerability Exposure (CVE) ID: CVE-2016-10168 Common Vulnerability Exposure (CVE) ID: CVE-2016-6906 BugTraq ID: 96503 http://www.securityfocus.com/bid/96503 Common Vulnerability Exposure (CVE) ID: CVE-2016-6912 BugTraq ID: 95843 http://www.securityfocus.com/bid/95843 Common Vulnerability Exposure (CVE) ID: CVE-2016-9317 BugTraq ID: 95841 http://www.securityfocus.com/bid/95841 Common Vulnerability Exposure (CVE) ID: CVE-2016-9933 BugTraq ID: 94865 http://www.securityfocus.com/bid/94865 Debian Security Information: DSA-3751 (Google Search) http://www.debian.org/security/2017/dsa-3751 http://www.openwall.com/lists/oss-security/2016/12/12/2 SuSE Security Announcement: openSUSE-SU-2016:3228 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.html SuSE Security Announcement: openSUSE-SU-2016:3239 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html SuSE Security Announcement: openSUSE-SU-2017:0006 (Google Search) http://lists.opensuse.org/opensuse-updates/2017-01/msg00002.html SuSE Security Announcement: openSUSE-SU-2017:0061 (Google Search) http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html SuSE Security Announcement: openSUSE-SU-2017:0081 (Google Search) http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.