Lucene search

K
mageiaGentoo FoundationMGASA-2015-0417
HistoryOct 30, 2015 - 11:11 p.m.

Updated libpng12 package fixes security vulnerability

2015-10-3023:11:10
Gentoo Foundation
advisories.mageia.org
9

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.012 Low

EPSS

Percentile

85.1%

An out-of-bounds read in png_convert_to_rfc1123() in png.c in libpng 1.2.x before 1.2.54 could potentially be exploited by a crafted PNG file to leak information from an application’s memory (CVE-2015-7981).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchlibpng12< 1.2.52-1.1libpng12-1.2.52-1.1.mga5

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.012 Low

EPSS

Percentile

85.1%