National Cyber Awareness System

Vulnerability Summary for CVE-2006-2906

Overview

The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote attackers to cause a denial of service (CPU consumption) via malformed GIF data that causes an infinite loop.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS Version 2 Metrics:

Vendor Statements (disclaimer)

Official Statement from Red Hat (03/14/2007)

Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2006-2174

Hyperlink:http://www.vupen.com/english/advisories/2006/2174

External Source: BID

Name: 18294

Hyperlink:http://www.securityfocus.com/bid/18294

External Source: BUGTRAQ

Name: 20060606 libgd 2.0.33 infinite loop in GIF decoding ?

Hyperlink:http://www.securityfocus.com/archive/1/436132

External Source: SECUNIA

Name: 20500

Type: Advisory

Hyperlink:http://secunia.com/advisories/20500

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-939

Hyperlink:https://issues.rpath.com/browse/RPL-939

External Source: XF

Name: gdgraphicslibrary-gif-dos(26976)

Hyperlink:http://xforce.iss.net/xforce/xfdb/26976

External Source: UBUNTU

Name: USN-298-1

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-298-1

External Source: TRUSTIX

Name: 2006-0038

Hyperlink:http://www.trustix.org/errata/2006/0038

External Source: SUSE

Name: SUSE-SA:2006:031

Hyperlink:http://www.novell.com/linux/security/advisories/2006_31_php.html

External Source: MANDRIVA

Name: MDKSA-2006:122

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:122

External Source: MANDRIVA

Name: MDKSA-2006:113

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:113

External Source: MANDRIVA

Name: MDKSA-2006:112

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:112

External Source: DEBIAN

Name: DSA-1117

Hyperlink:http://www.debian.org/security/2006/dsa-1117

External Source: SREASON

Name: 1067

Hyperlink:http://securityreason.com/securityalert/1067

External Source: SECUNIA

Name: 23783

Hyperlink:http://secunia.com/advisories/23783

External Source: SECUNIA

Name: 21186

Hyperlink:http://secunia.com/advisories/21186

External Source: SECUNIA

Name: 21050

Hyperlink:http://secunia.com/advisories/21050

External Source: SECUNIA

Name: 20887

Hyperlink:http://secunia.com/advisories/20887

External Source: SECUNIA

Name: 20866

Hyperlink:http://secunia.com/advisories/20866

External Source: SECUNIA

Name: 20853

Hyperlink:http://secunia.com/advisories/20853

External Source: SECUNIA

Name: 20676

Hyperlink:http://secunia.com/advisories/20676

External Source: SECUNIA

Name: 20571

Hyperlink:http://secunia.com/advisories/20571