Hide Forgot
An out-of-bounds read in imagescale function was found that can cause crash of application. Upstream bug (php): https://bugs.php.net/bug.php?id=72227 Upstream patch: libgd: https://github.com/libgd/libgd/commit/4f65a3e4eedaffa1efcf9ee1eb08f0b504fbc31a php: https://git.php.net/?p=php-src.git;a=commit;h=7a1aac3343af85b4af4df5f8844946eaa27394ab CVE assignment: http://seclists.org/oss-sec/2016/q2/412
imagescale() function was only introduced in PHP 5.5, hence older are not affected.
This is a limited 8 byte (sizeof(double)) buffer over-read. In standard non-ASAN builds, it's very unlikely to cause crash. This does not have any real practical impact.
This issue has been addressed in the following products: Red Hat Software Collections for Red Hat Enterprise Linux 6 Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUS Red Hat Software Collections for Red Hat Enterprise Linux 7 Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUS Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUS Via RHSA-2016:2750 https://rhn.redhat.com/errata/RHSA-2016-2750.html