Düşük
CVE-2015-8126: Libpng: arabellek taşması
Açıklama (NVD)
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.
Özet bilgiler
- Ürün
- Libpng Libpng
- EPSS
- %10,34 (yüzdelik 96)
- CWE
- CWE-120
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| libpng-libpng | — | — | 1.0.64 |
| libpng-libpng | 1.1.1 | — | 1.2.54 |
| libpng-libpng | 1.3.0 | — | 1.4.17 |
| libpng-libpng | 1.5.0 | — | 1.5.24 |
| libpng-libpng | 1.6.0 | — | 1.6.19 |
| fedoraproject-fedora | 21 | 21 | — |
| fedoraproject-fedora | 22 | 22 | — |
| fedoraproject-fedora | 23 | 23 | — |
| opensuse-leap | 42.1 | 42.1 | — |
| opensuse-opensuse | 13.1 | 13.1 | — |
| opensuse-opensuse | 13.2 | 13.2 | — |
| suse-linux-enterprise-desktop | 11 | 11 | — |
| suse-linux-enterprise-desktop | 11 | 11 | — |
| suse-linux-enterprise-desktop | 12 | 12 | — |
| suse-linux-enterprise-desktop | 12 | 12 | — |
| suse-linux-enterprise-server | 12 | 12 | — |
| suse-linux-enterprise-server | 12 | 12 | — |
| debian-debian-linux | 7.0 | 7.0 | — |
| debian-debian-linux | 8.0 | 8.0 | — |
| debian-debian-linux | 9.0 | 9.0 | — |
| redhat-satellite | 5.7 | 5.7 | — |
| redhat-enterprise-linux-desktop | 6.0 | 6.0 | — |
| redhat-enterprise-linux-desktop | 7.0 | 7.0 | — |
| redhat-enterprise-linux-eus | 6.7 | 6.7 | — |
| redhat-enterprise-linux-eus | 7.2 | 7.2 | — |
| redhat-enterprise-linux-eus | 7.3 | 7.3 | — |
| redhat-enterprise-linux-eus | 7.4 | 7.4 | — |
| redhat-enterprise-linux-eus | 7.5 | 7.5 | — |
| redhat-enterprise-linux-eus | 7.6 | 7.6 | — |
| redhat-enterprise-linux-eus | 7.7 | 7.7 | — |
Kaynaklar
- NVD kaydı
- googlechromereleases.blogspot.com
- lists.apple.com
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- CWE-120