Lucene search
AmazonALAS-2015-611HistoryNov 23, 2015 - 1:43 p.m.
Medium: libpng
2015-11-2313:43:00
alas.aws.amazon.com
14
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.015 Low
EPSS
Percentile
86.7%
Issue Overview:
Multiple buffer overflows in the png_set_PLTE and png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19, allowing remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image (CVE-2015-8126).
Affected Packages:
libpng
Issue Correction:
Run yum update libpng to update your system.
New Packages:
i686:
libpng-static-1.2.49-1.13.amzn1.i686
libpng-debuginfo-1.2.49-1.13.amzn1.i686
libpng-devel-1.2.49-1.13.amzn1.i686
libpng-1.2.49-1.13.amzn1.i686
src:
libpng-1.2.49-1.13.amzn1.src
x86_64:
libpng-devel-1.2.49-1.13.amzn1.x86_64
libpng-static-1.2.49-1.13.amzn1.x86_64
libpng-1.2.49-1.13.amzn1.x86_64
libpng-debuginfo-1.2.49-1.13.amzn1.x86_64
Additional References
Red Hat: CVE-2015-8126
Mitre: CVE-2015-8126
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | libpng-static | < 1.2.49-1.13.amzn1 | libpng-static-1.2.49-1.13.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | libpng-debuginfo | < 1.2.49-1.13.amzn1 | libpng-debuginfo-1.2.49-1.13.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | libpng-devel | < 1.2.49-1.13.amzn1 | libpng-devel-1.2.49-1.13.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | libpng | < 1.2.49-1.13.amzn1 | libpng-1.2.49-1.13.amzn1.i686.rpm |
| Amazon Linux | 1 | x86_64 | libpng-devel | < 1.2.49-1.13.amzn1 | libpng-devel-1.2.49-1.13.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | libpng-static | < 1.2.49-1.13.amzn1 | libpng-static-1.2.49-1.13.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | libpng | < 1.2.49-1.13.amzn1 | libpng-1.2.49-1.13.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | libpng-debuginfo | < 1.2.49-1.13.amzn1 | libpng-debuginfo-1.2.49-1.13.amzn1.x86_64.rpm |
Related
nessus
nessus
SUSE SLED12 / SLES12 Security Update : libpng12 (SUSE-SU-2016:0050-1)
2016-01-12 00:00:00
openSUSE Security Update : libpng12 (openSUSE-2016-30)
2016-01-25 00:00:00
SUSE SLED11 / SLES11 Security Update : libpng12-0 (SUSE-SU-2016:0061-1)
2016-01-12 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: mingw-libpng-1.6.19-1.fc23
2015-11-27 18:24:08
[SECURITY] Fedora 23 Update: mingw-libpng-1.6.21-1.fc23
2016-02-17 04:02:12
[SECURITY] Fedora 22 Update: mingw-libpng-1.6.21-1.fc22
2016-02-17 04:26:13
debiancve
debiancve
CVE-2015-8126
2015-11-13 03:59:00
CVE-2015-8472
2016-01-21 15:59:00
veracode
veracode
Buffer Overflow
2017-02-08 02:19:46
Denial-of-Service (DoS) Via Embedded Dependency
2017-02-27 07:42:41
openvas
openvas
Fedora Update for mingw-libpng FEDORA-2015-8
2015-11-29 00:00:00
Fedora Update for mingw-libpng FEDORA-2016-9
2016-02-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:0050-1)
2021-04-19 00:00:00
prion
prion
Buffer overflow
2015-11-13 03:59:00
Buffer overflow
2016-01-21 15:59:00
ubuntucve
ubuntucve
CVE-2015-8126
2015-11-12 00:00:00
CVE-2015-8472
2015-12-09 00:00:00
cve
cve
CVE-2015-8126
2015-11-13 03:59:00
CVE-2015-8472
2016-01-21 15:59:00
f5
f5
K76930736 : Libpng vulnerability CVE-2015-8126
2015-12-19 00:00:00
SOL76930736 - Libpng vulnerability CVE-2015-8126
2015-12-18 00:00:00
SOL81903701 - Libpng vulnerability CVE-2015-8472
2016-03-07 00:00:00
suse
suse
Security update for libpng16 (important)
2015-11-25 21:14:06
Security update for libpng12 (important)
2015-11-25 21:13:40
Security update for vlc (important)
2016-06-22 14:10:14
mageia
mageia
Updated libpng/libpng12 packages fix security vulnerability
2015-11-20 01:08:19
Updated libpng packages fix security vulnerabilities
2015-12-17 00:01:04
redhat
redhat
(RHSA-2015:2596) Moderate: libpng security update
2015-12-09 13:26:42
(RHSA-2015:2595) Moderate: libpng12 security update
2015-12-09 13:25:59
(RHSA-2015:2594) Moderate: libpng security update
2015-12-09 00:00:00
slackware
slackware
[slackware-security] libpng
2015-12-16 06:25:09
[slackware-security] libpng
2015-12-03 08:20:21
ibm
ibm
centos
centos
libpng security update
2015-12-09 19:21:36
libpng12 security update
2015-12-09 19:21:50
libpng security update
2015-12-09 14:47:29
osv
osv
libpng - security update
2015-11-18 00:00:00
libpng - security update
2015-11-17 00:00:00
libpng - security update
2016-01-13 00:00:00
archlinux
archlinux
libpng: multiple issues
2015-11-17 00:00:00
libpng: buffer overflow
2015-12-28 00:00:00
lib32-libpng: multiple issues
2015-11-17 00:00:00
freebsd
freebsd
libpng buffer overflow in png_set_PLTE
2015-11-15 00:00:00
debian
debian
[SECURITY] [DSA 3399-1] libpng security update
2015-11-18 19:55:41
[SECURITY] [DSA 3399-1] libpng security update
2015-11-18 19:55:41
[SECURITY] [DSA 3443-1] libpng security update
2016-01-13 21:31:22
oraclelinux
oraclelinux
libpng security update
2015-12-09 00:00:00
libpng12 security update
2015-12-09 00:00:00
libpng security update
2015-12-09 00:00:00
ubuntu
ubuntu
libpng vulnerabilities
2015-11-19 00:00:00
gentoo
gentoo
libpng: Multiple vulnerabilities
2016-11-15 00:00:00
kaspersky
kaspersky
KLA10743 Multiple vulnerabilities in Oracle Java SE
2016-01-20 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.015 Low
EPSS
Percentile
86.7%
Related for ALAS-2015-611