libpng 'png_set_text_2()' function remote denial of service vulnerability

🗓️ 06 Jan 2017 00:00:00Reported by China National Vulnerability DatabaseType

Remote denial of service in libpng png_set_text_2 before 1.6.27 may allow arbitrary code execution.

Reporter	Title	Published	Views	Family All 111
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: Gdal vulnerabilities affect IBM Netezza Analytics for NPS	3 Jun 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Common Reporting (TCR) 2017Q3 Security Updater: TCR, a part of IBM Jazz for Service Management (JazzSM) is affected by multiple vulnerabilities	17 Jun 201815:47	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in the libpng library affects IBM Cognos Metrics Manager	15 Jun 201823:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence Server 2017Q3 Security Updater : IBM Cognos Business Intelligence Server is affected by multiple vulnerabilities.	15 Jun 201823:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	15 Jun 201823:49	–	ibm
ArchLinux	[ASA-201701-2] libpng: denial of service	1 Jan 201700:00	–	archlinux
ArchLinux	[ASA-201701-4] libpng12: denial of service	2 Jan 201700:00	–	archlinux
ArchLinux	[ASA-201701-5] lib32-libpng: denial of service	2 Jan 201700:00	–	archlinux
ArchLinux	[ASA-201701-6] lib32-libpng12: denial of service	2 Jan 201700:00	–	archlinux

Vulners

Node

libpng libpngRange<1.6.27

Source	Link
securityfocus	www.securityfocus.com/bid/95157/

10 Jan 2017 00:00Current

9.2High risk

Vulners AI Score9.2

CVSS 25

CVSS 37.5

EPSS0.05517