CVE:CVE-2016-6128
CNNVD:CNNVD-201606-660
PHP是一种在服务器端执行的脚本语言。
PHP 7.0.9版本中使用的GD Graphics Library 2.2.3之前的版本中的gd_crop.c文件中的‘gdImageCropThreshold’函数存在输入验证错误漏洞。远程攻击者可借助无效的color索引利用该漏洞造成拒绝服务（应用程序崩溃）。
solution:Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade libgd libgd to a higher version than 2.2.2,and avoid the version (,2.2.2]; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,16.04,and avoid the version 12.04,14.04,15.10,16.04