CVE-2020-35511

2022-08-2320:15:08

Debian Security Bug Tracker

security-tracker.debian.org

buffer overflow

pngcheck-2.4.0

crafted png file

unix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

32.2%

JSON

A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file.

OSVersionArchitecturePackageVersionFilename
Debian12allpngcheck< 3.0.2-2pngcheck_3.0.2-2_all.deb
Debian11allpngcheck< 3.0.3-1~deb11u1pngcheck_3.0.3-1~deb11u1_all.deb
Debian999allpngcheck< 3.0.2-2pngcheck_3.0.2-2_all.deb
Debian13allpngcheck< 3.0.2-2pngcheck_3.0.2-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	pngcheck	< 3.0.2-2	pngcheck_3.0.2-2_all.deb
Debian	11	all	pngcheck	< 3.0.3-1~deb11u1	pngcheck_3.0.3-1~deb11u1_all.deb
Debian	999	all	pngcheck	< 3.0.2-2	pngcheck_3.0.2-2_all.deb
Debian	13	all	pngcheck	< 3.0.2-2	pngcheck_3.0.2-2_all.deb