Lucene search
HistoryFeb 27, 2014 - 8:55 p.m.
CVE-2014-0333
cve-2014-0333
libpng
denial of service
infinite loop
cpu consumption
idat chunk
6.3 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.009 Low
EPSS
Percentile
82.6%
The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero.
Related
seebug
seebug
libpngζη»ζε‘ζΌζ΄
2014-02-27 00:00:00
prion
prion
Design/Logic Flaw
2014-02-27 20:55:00
nessus
nessus
openSUSE Security Update : libpng16 (openSUSE-SU-2014:0358-1)
2014-06-13 00:00:00
Fedora 20 : libpng-1.6.6-3.fc20 (2014-6631)
2014-05-29 00:00:00
Fedora 20 : mingw-libpng-1.6.10-1.fc20 (2014-4564)
2014-04-03 00:00:00
cert
cert
libpng denial-of-service vulnerability
2014-02-25 00:00:00
mageia
mageia
Updated libpng package fixes security vulnerability
2014-03-15 20:29:56
ubuntucve
ubuntucve
CVE-2014-0333
2014-02-27 00:00:00
debiancve
debiancve
CVE-2014-0333
2014-02-27 20:55:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0131)
2022-01-28 00:00:00
Fedora Update for libpng FEDORA-2014-6631
2014-06-02 00:00:00
Fedora Update for mingw-libpng FEDORA-2014-4564
2014-04-03 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: libpng-1.6.6-3.fc20
2014-05-28 23:54:45
[SECURITY] Fedora 20 Update: mingw-libpng-1.6.10-1.fc20
2014-04-02 09:27:10
securityvulns
securityvulns
[ MDVSA-2015:090 ] libpng
2015-04-20 00:00:00
libpng security vulnerabilities
2015-04-20 00:00:00
gentoo
gentoo
libpng: Multiple vulnerabilities
2014-08-14 00:00:00
6.3 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.009 Low
EPSS
Percentile
82.6%
Related for CVE-2014-0333