Sec Bug->Bug #73280 [Csd]: Stack Buffer Overflow in GD dynamicGetbuf

From: Date: Mon, 13 Feb 2017 02:02:47 +0000
Subject: Sec Bug->Bug #73280 [Csd]: Stack Buffer Overflow in GD dynamicGetbuf
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-207362@lists.php.net to get a copy of this message 
Edit report at https://bugs.php.net/bug.php?id=73280&edit=1

 ID:                 73280
 Updated by:         stas@php.net
 Reported by:        emmanuel dot law at gmail dot com
 Summary:            Stack Buffer Overflow in GD dynamicGetbuf
 Status:             Closed
-Type:               Security
+Type:               Bug
 Package:            GD related
 Operating System:   *
-PHP Version:        7.0.11
+PHP Version:        5.6.28
 Assigned To:        cmb
 Block user comment: N
 Private report:     N
 CVE-ID:             2016-8670



Previous Comments:
------------------------------------------------------------------------
[2016-10-17 10:07:06] bwoebi@php.net

Automatic comment on behalf of cmbecker69@gmx.de
Revision: http://git.php.net/?p=php-src.git;a=commit;h=cc08cbc84d46933c1e9e0149633f1ed5d19e45e9
Log: Fix #73280: Stack Buffer Overflow in GD dynamicGetbuf

------------------------------------------------------------------------
[2016-10-17 10:06:50] bwoebi@php.net

Automatic comment on behalf of cmbecker69@gmx.de
Revision: http://git.php.net/?p=php-src.git;a=commit;h=086491555022b3b0ec59d26c6442a302171666ba
Log: Fix #73280: Stack Buffer Overflow in GD dynamicGetbuf

------------------------------------------------------------------------
[2016-10-16 23:33:46] emmanuel dot law at gmail dot com

I think you assigned the wrong CVE for this?
The Debian guys requested for one on OSS mailing list and it was assigned:cve-2016-8670

http://www.openwall.com/lists/oss-security/2016/10/15/6

------------------------------------------------------------------------
[2016-10-14 02:23:17] ab@php.net

Automatic comment on behalf of cmbecker69@gmx.de
Revision: http://git.php.net/?p=php-src.git;a=commit;h=086491555022b3b0ec59d26c6442a302171666ba
Log: Fix #73280: Stack Buffer Overflow in GD dynamicGetbuf

------------------------------------------------------------------------
[2016-10-14 02:22:55] ab@php.net

Automatic comment on behalf of cmbecker69@gmx.de
Revision: http://git.php.net/?p=php-src.git;a=commit;h=cc08cbc84d46933c1e9e0149633f1ed5d19e45e9
Log: Fix #73280: Stack Buffer Overflow in GD dynamicGetbuf

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=73280


--
Edit this bug report at https://bugs.php.net/bug.php?id=73280&edit=1

Thread (1 message)

  • stas@php.net
  • Unknown Message
    • stas@php.net
« previous php.bugs (#207362) next »