Wind River Support Network


LIN6-11347 : Security Advisory - php - CVE-2015-8877

Created: May 31, 2016    Updated: Dec 3, 2018
Resolved Date: Jun 28, 2016
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.

Other Downloads

Live chat