CVE-2016-2317

Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in magick/render.c, (2) GetToken function in magick/utility.c, and (3) GetTransformTokens function in coders/svg.c.

• CWE-119

• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.htmlThird Party Advisory
• http://www.debian.org/security/2016/dsa-3746Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/02/11/6Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/05/20/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/05/27/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/05/31/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/09/07/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/09/18/8Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/83241Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1306148Issue Tracking
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.htmlThird Party Advisory
• http://www.debian.org/security/2016/dsa-3746Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/02/11/6Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/05/20/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/05/27/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/05/31/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/09/07/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/09/18/8Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/83241Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1306148Issue Tracking

Published

Feb 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2311Black Box AlertWerks ServSensor with firmware before SP473, …
• CVE-2016-2312Turning all screens off in Plasma-workspace and kscreenlocke…
• CVE-2016-2313auth_login.php in Cacti before 0.8.8g allows remote authenti…
• CVE-2016-2314GlobespanVirata ftpd 1.0, as used on Huawei SmartAX MT882 de…
• CVE-2016-2315revision.c in git before 2.7.4 uses an incorrect integer dat…9.8
• CVE-2016-2316chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1,…
• CVE-2016-2318GraphicsMagick 1.3.23 allows remote attackers to cause a den…
• CVE-2016-2324Integer overflow in Git before 2.7.4 allows remote attackers…9.8
• CVE-2016-2326Integer overflow in the asf_write_packet function in libavfo…
• CVE-2016-2327libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect li…
• CVE-2016-2328libswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does no…
• CVE-2016-2329libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly v…