The vulnerability of the libpng library and the Ubuntu/Debian GNU/Linux operating systems allows attackers to gain access to protected information.

🗓️ 14 Dec 2015 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Libpng flaw in png_convert_to_rfc1123 on Ubuntu/Debian permits remote access to protected data via crafted image.

Reporter	Title	Published	Views	Family All 188
IBM Security Bulletins	Security Bulletin: Using Components with Known Vulnerabilities affects IBM Security Guardium (multiple CVEs)	16 Jun 201821:41	–	ibm
IBM Security Bulletins	Security Bulletin:Multiple Security Vulnerabilities exist in IBM Cognos Insight	24 Feb 202007:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by libpng vulnerabilities (CVE-2015-7981, CVE-2015-8126)	18 Jun 201801:32	–	ibm
IBM Security Bulletins	Title Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Identity Governance and Intelligence 5.2	16 Jun 201821:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect IBM Tivoli / Security Directory Server January 2016 CPU	16 Jun 201821:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in current releases of IBM® WebSphere Real Time	15 Jun 201807:04	–	ibm
IBM Security Bulletins	Security Bulletin: CICS Transaction Gateway for Multiplatforms	15 Jun 201807:05	–	ibm
IBM Security Bulletins	Security Bulletin: Gdal vulnerabilities affect IBM Netezza Analytics for NPS	3 Jun 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in current releases of the IBM® SDK, Java™ Technology Edition affect IBM Tivoli Network Manager IP Edition	17 Jun 201815:22	–	ibm
IBM Security Bulletins	Security Bulletin: Libpng vulnerabilities affect IBM SmartCloud Entry (CVE-2015-8126 CVE-2015-7981 CVE-2015-8472)	19 Jul 202000:49	–	ibm

Vulners

Node

guy_eric_schalnat_andreas_dilger_glenn_randers-pehrson libpngRange1.0.0–1.0.3

OR

guy_eric_schalnat_andreas_dilger_glenn_randers-pehrson libpngRange1.0.5–1.0.48

OR

guy_eric_schalnat_andreas_dilger_glenn_randers-pehrson libpngRange1.0.50–1.0.63

OR

guy_eric_schalnat_andreas_dilger_glenn_randers-pehrson libpngRange1.2.0–1.2.53

OR

canonical ubuntuMatch15.04

OR

canonical ubuntuMatch15.10

OR

canonical ubuntuMatch12.04

OR

canonical ubuntuMatch14.04

Source	Link
sourceforge	www.sourceforge.net/projects/libpng/files/libpng12/1.2.54/
ubuntu	www.ubuntu.com/usn/USN-2815-1
openwall	www.openwall.com/lists/oss-security/2015/10/26/3
openwall	www.openwall.com/lists/oss-security/2015/10/26/1
debian	www.debian.org/security/2015/dsa-3399
sourceforge	www.sourceforge.net/projects/libpng/files/libpng14/1.4.17/
sourceforge	www.sourceforge.net/projects/libpng/files/libpng10/1.0.64/
sourceforge	www.sourceforge.net/p/libpng/bugs/241/
web	www.web.nvd.nist.gov/view/vuln/detail
ubuntu	www.ubuntu.com/usn/usn-2815-1

23 Mar 2021 00:00Current

7High risk

Vulners AI Score7

CVSS 25

EPSS0.06534

libpng vulnerability png_convert_to_rfc1123 ubuntu debian remote access crafted image protected data