Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2015-0473
HistoryDec 17, 2015 - 12:01 a.m.

Updated libpng packages fix security vulnerabilities

2015-12-1700:01:04
Gentoo Foundation
advisories.mageia.org
11

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.12 Low

EPSS

Percentile

95.3%

JSON

Updated libpng and libpng12 packages fix security vulnerability: The fix for CVE-2015-8126 was incomplete. While it defended against the potential overrun while reading PNG files, it did not detect a potential overrun by applications using png_set_PLTE directly (CVE-2015-8472).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchlibpng12< 1.2.55-1libpng12-1.2.55-1.mga5
Mageia5noarchlibpng< 1.6.20-1libpng-1.6.20-1.mga5

Related

redhat 6
nessus 73
f5 4
openvas 33
fedora 16
ibm 15
prion 2
cve 2
slackware 2
ubuntucve 2
centos 3
oraclelinux 3
veracode 3
archlinux 3
freebsd 1
debiancve 2
debian 7
osv 5
mageia 1
suse 9
amazon 2
ubuntu 2
cloudfoundry 1
rosalinux 1
gentoo 1
redhat
redhat
(RHSA-2015:2596) Moderate: libpng security update
2015-12-09 13:26:42
(RHSA-2015:2595) Moderate: libpng12 security update
2015-12-09 13:25:59
(RHSA-2015:2594) Moderate: libpng security update
2015-12-09 00:00:00
nessus
nessus
F5 Networks BIG-IP : Libpng vulnerability (K81903701)
2016-05-26 00:00:00
FreeBSD : libpng buffer overflow in png_set_PLTE (1886e195-8b87-11e5-90e7-b499baebfeaf)
2015-11-16 00:00:00
Fedora 23 : libpng-1.6.17-3.fc23 (2015-4ad4998d00)
2016-03-04 00:00:00
f5
f5
SOL81903701 - Libpng vulnerability CVE-2015-8472
2016-03-07 00:00:00
K81903701 : Libpng vulnerability CVE-2015-8472
2016-03-07 00:00:00
SOL76930736 - Libpng vulnerability CVE-2015-8126
2015-12-18 00:00:00
openvas
openvas
RedHat Update for libpng RHSA-2015:2596-01
2015-12-10 00:00:00
Oracle Linux Local Check: ELSA-2015-2596
2015-12-10 00:00:00
Fedora Update for libpng10 FEDORA-2015-3461
2015-12-19 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: libpng15-1.5.25-1.fc22
2016-01-04 20:00:05
[SECURITY] Fedora 23 Update: libpng10-1.0.65-1.fc23
2015-12-18 07:58:28
[SECURITY] Fedora 23 Update: libpng15-1.5.25-1.fc23
2016-01-04 18:55:22
ibm
ibm
Security Bulletin: IBM Forms Viewer may be affected by a known issue with libpng library (CVE-2015-8126, CVE-2015-8472)
2018-06-16 19:52:51
Security Bulletin: Vulnerabilities in libpng affect PowerKVM (CVE-2015-8126, CVE-2015-8472)
2018-06-18 01:30:37
Security Bulletin: Vulnerabilities in libpng affect Rational DOORS (CVE-2015-8126, CVE-2015-8472)
2020-05-01 08:19:24
prion
prion
Buffer overflow
2016-01-21 15:59:00
Buffer overflow
2015-11-13 03:59:00
cve
cve
CVE-2015-8472
2016-01-21 15:59:00
CVE-2015-8126
2015-11-13 03:59:00
slackware
slackware
[slackware-security] libpng
2015-12-16 06:25:09
[slackware-security] libpng
2015-12-03 08:20:21
ubuntucve
ubuntucve
CVE-2015-8472
2015-12-09 00:00:00
CVE-2015-8126
2015-11-12 00:00:00
centos
centos
libpng security update
2015-12-09 19:21:36
libpng12 security update
2015-12-09 19:21:50
libpng security update
2015-12-09 14:47:29
oraclelinux
oraclelinux
libpng security update
2015-12-09 00:00:00
libpng12 security update
2015-12-09 00:00:00
libpng security update
2015-12-09 00:00:00
veracode
veracode
Denial-of-Service (DoS) Via Embedded Dependency
2017-02-27 07:42:41
Buffer Overflow
2017-02-06 08:35:04
Buffer Overflow
2017-02-08 02:19:46
archlinux
archlinux
libpng: buffer overflow
2015-12-28 00:00:00
lib32-libpng: multiple issues
2015-11-17 00:00:00
libpng: multiple issues
2015-11-17 00:00:00
freebsd
freebsd
libpng buffer overflow in png_set_PLTE
2015-11-15 00:00:00
debiancve
debiancve
CVE-2015-8472
2016-01-21 15:59:00
CVE-2015-8126
2015-11-13 03:59:00
debian
debian
[SECURITY] [DSA 3443-1] libpng security update
2016-01-13 21:31:22
[SECURITY] [DSA 3443-1] libpng security update
2016-01-13 21:31:22
[SECURITY] [DLA 375-1] libpng security update
2015-12-27 21:02:26
osv
osv
libpng - security update
2016-01-13 00:00:00
libpng - security update
2015-12-27 00:00:00
libpng - security update
2015-11-18 00:00:00
mageia
mageia
Updated libpng/libpng12 packages fix security vulnerability
2015-11-20 01:08:19
suse
suse
Security update for libpng16 (important)
2015-11-25 21:14:06
Security update for libpng12 (important)
2015-11-25 21:13:40
Security update for java-1_8_0-openjdk (critical)
2016-01-27 21:11:29
amazon
amazon
Medium: libpng
2015-11-23 13:43:00
Medium: libpng
2015-12-14 10:00:00
ubuntu
ubuntu
libpng vulnerabilities
2016-01-06 00:00:00
libpng vulnerabilities
2015-11-19 00:00:00
cloudfoundry
cloudfoundry
USN-2861-1 libpng vulnerability | Cloud Foundry
2016-01-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1884
2021-07-02 17:16:15
gentoo
gentoo
libpng: Multiple vulnerabilities
2016-11-15 00:00:00

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.12 Low

EPSS

Percentile

95.3%

JSON
Related for MGASA-2015-0473
redhat6nessus73f54openvas33fedora16ibm15prion2cve2slackware2ubuntucve2centos3oraclelinux3veracode3archlinux3freebsd1debiancve2debian7osv5mageia1suse9amazon2ubuntu2cloudfoundry1rosalinux1gentoo1