Lucene search

[email protected]NVD:CVE-2015-8540

HistoryApr 14, 2016 - 2:59 p.m.

CVE-2015-8540

2016-04-1414:59:03

CWE-189

[email protected]

web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.6%

JSON

Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.

Affected configurations

NVD

Node

redhatenterprise_linux_desktop_supplementaryMatch5.0

redhatenterprise_linux_desktop_supplementaryMatch6.0

redhatenterprise_linux_hpc_nodeMatch6.0

redhatenterprise_linux_server_supplementaryMatch5.0

redhatenterprise_linux_server_supplementaryMatch6.0

redhatenterprise_linux_workstation_supplementaryMatch6.0

Node

libpnglibpngMatch1.2.0

libpnglibpngMatch1.2.1

libpnglibpngMatch1.2.2

libpnglibpngMatch1.2.3

libpnglibpngMatch1.2.4

libpnglibpngMatch1.2.5

libpnglibpngMatch1.2.6

libpnglibpngMatch1.2.7

libpnglibpngMatch1.2.8

libpnglibpngMatch1.2.9

libpnglibpngMatch1.2.10

libpnglibpngMatch1.2.11

libpnglibpngMatch1.2.12

libpnglibpngMatch1.2.13

libpnglibpngMatch1.2.14

libpnglibpngMatch1.2.15

libpnglibpngMatch1.2.16

libpnglibpngMatch1.2.17

libpnglibpngMatch1.2.18

libpnglibpngMatch1.2.19

libpnglibpngMatch1.2.20

libpnglibpngMatch1.2.21

libpnglibpngMatch1.2.22

libpnglibpngMatch1.2.23

libpnglibpngMatch1.2.24

libpnglibpngMatch1.2.25

libpnglibpngMatch1.2.26

libpnglibpngMatch1.2.27

libpnglibpngMatch1.2.28

libpnglibpngMatch1.2.29

libpnglibpngMatch1.2.30

libpnglibpngMatch1.2.31

libpnglibpngMatch1.2.32

libpnglibpngMatch1.2.33

libpnglibpngMatch1.2.34

libpnglibpngMatch1.2.35

libpnglibpngMatch1.2.36

libpnglibpngMatch1.2.37

libpnglibpngMatch1.2.38

libpnglibpngMatch1.2.39

libpnglibpngMatch1.2.40

libpnglibpngMatch1.2.41

libpnglibpngMatch1.2.42

libpnglibpngMatch1.2.43

libpnglibpngMatch1.2.43devel

libpnglibpngMatch1.2.44

libpnglibpngMatch1.2.45

libpnglibpngMatch1.2.45devel

libpnglibpngMatch1.2.46

libpnglibpngMatch1.2.46devel

libpnglibpngMatch1.2.47

libpnglibpngMatch1.2.47beta

libpnglibpngMatch1.2.48

libpnglibpngMatch1.2.48betas

libpnglibpngMatch1.2.49

libpnglibpngMatch1.2.50

libpnglibpngMatch1.2.51

libpnglibpngMatch1.2.52

libpnglibpngMatch1.2.53

libpnglibpngMatch1.2.54

libpnglibpngMatch1.2.55

Node

libpnglibpngMatch1.1.1

Node

libpnglibpngMatch1.0.0

libpnglibpngMatch1.0.1

libpnglibpngMatch1.0.2

libpnglibpngMatch1.0.3

libpnglibpngMatch1.0.5

libpnglibpngMatch1.0.6

libpnglibpngMatch1.0.7

libpnglibpngMatch1.0.8

libpnglibpngMatch1.0.9

libpnglibpngMatch1.0.10

libpnglibpngMatch1.0.11

libpnglibpngMatch1.0.12

libpnglibpngMatch1.0.13

libpnglibpngMatch1.0.14

libpnglibpngMatch1.0.15

libpnglibpngMatch1.0.16

libpnglibpngMatch1.0.17

libpnglibpngMatch1.0.18

libpnglibpngMatch1.0.19

libpnglibpngMatch1.0.20

libpnglibpngMatch1.0.21

libpnglibpngMatch1.0.22

libpnglibpngMatch1.0.23

libpnglibpngMatch1.0.24

libpnglibpngMatch1.0.25

libpnglibpngMatch1.0.26

libpnglibpngMatch1.0.27

libpnglibpngMatch1.0.28

libpnglibpngMatch1.0.29

libpnglibpngMatch1.0.30

libpnglibpngMatch1.0.31

libpnglibpngMatch1.0.32

libpnglibpngMatch1.0.33

libpnglibpngMatch1.0.34

libpnglibpngMatch1.0.35

libpnglibpngMatch1.0.37

libpnglibpngMatch1.0.38

libpnglibpngMatch1.0.39

libpnglibpngMatch1.0.40

libpnglibpngMatch1.0.41

libpnglibpngMatch1.0.42

libpnglibpngMatch1.0.43

libpnglibpngMatch1.0.44

libpnglibpngMatch1.0.45

libpnglibpngMatch1.0.46

libpnglibpngMatch1.0.47

libpnglibpngMatch1.0.48

libpnglibpngMatch1.0.50

libpnglibpngMatch1.0.51

libpnglibpngMatch1.0.52

libpnglibpngMatch1.0.53

libpnglibpngMatch1.0.54

libpnglibpngMatch1.0.55

libpnglibpngMatch1.0.55rc01

libpnglibpngMatch1.0.56

libpnglibpngMatch1.0.56devel

libpnglibpngMatch1.0.57

libpnglibpngMatch1.0.57rc01

libpnglibpngMatch1.0.58

libpnglibpngMatch1.0.59

libpnglibpngMatch1.0.60

libpnglibpngMatch1.0.61

libpnglibpngMatch1.0.62

libpnglibpngMatch1.0.63

libpnglibpngMatch1.0.64

libpnglibpngMatch1.0.65

Node

fedoraprojectfedoraMatch23

Node

debiandebian_linuxMatch6.0

Node

libpnglibpngMatch1.4.0

libpnglibpngMatch1.4.1

libpnglibpngMatch1.4.2

libpnglibpngMatch1.4.3

libpnglibpngMatch1.4.4

libpnglibpngMatch1.4.5

libpnglibpngMatch1.4.6

libpnglibpngMatch1.4.7

libpnglibpngMatch1.4.8

libpnglibpngMatch1.4.9

libpnglibpngMatch1.4.10

libpnglibpngMatch1.4.11

libpnglibpngMatch1.4.12

libpnglibpngMatch1.4.13

libpnglibpngMatch1.4.14

libpnglibpngMatch1.4.15

libpnglibpngMatch1.4.16

libpnglibpngMatch1.4.17

libpnglibpngMatch1.4.18

Node

libpnglibpngMatch0.90

libpnglibpngMatch0.95

libpnglibpngMatch0.96

libpnglibpngMatch0.97

libpnglibpngMatch0.98

libpnglibpngMatch0.99

Node

libpnglibpngMatch1.5.0beta

libpnglibpngMatch1.5.1

libpnglibpngMatch1.5.1beta

libpnglibpngMatch1.5.2

libpnglibpngMatch1.5.2beta

libpnglibpngMatch1.5.3beta

libpnglibpngMatch1.5.4

libpnglibpngMatch1.5.4beta

libpnglibpngMatch1.5.5

libpnglibpngMatch1.5.5beta

libpnglibpngMatch1.5.6

libpnglibpngMatch1.5.6beta

libpnglibpngMatch1.5.7

libpnglibpngMatch1.5.7beta

libpnglibpngMatch1.5.8

libpnglibpngMatch1.5.8beta

libpnglibpngMatch1.5.9

libpnglibpngMatch1.5.9beta

libpnglibpngMatch1.5.10beta

libpnglibpngMatch1.5.11

libpnglibpngMatch1.5.11beta

libpnglibpngMatch1.5.12

libpnglibpngMatch1.5.13

libpnglibpngMatch1.5.13beta

libpnglibpngMatch1.5.14

libpnglibpngMatch1.5.15

libpnglibpngMatch1.5.16

libpnglibpngMatch1.5.17

libpnglibpngMatch1.5.18

libpnglibpngMatch1.5.19

libpnglibpngMatch1.5.20beta

libpnglibpngMatch1.5.21

libpnglibpngMatch1.5.22

libpnglibpngMatch1.5.23

libpnglibpngMatch1.5.24

libpnglibpngMatch1.5.25

Node

libpnglibpngMatch1.3.0

References

lists.fedoraproject.org/pipermail/package-announce/2015-December/174435.html

sourceforge.net/p/libpng/bugs/244/

sourceforge.net/p/libpng/code/ci/d9006f683c641793252d92254a75ae9b815b42ed/

sourceforge.net/projects/libpng/files/libpng10/1.0.66/

sourceforge.net/projects/libpng/files/libpng12/1.2.56/

sourceforge.net/projects/libpng/files/libpng14/1.4.19/

sourceforge.net/projects/libpng/files/libpng15/1.5.26/

www.debian.org/security/2016/dsa-3443

www.openwall.com/lists/oss-security/2015/12/10/6

www.openwall.com/lists/oss-security/2015/12/10/7

www.openwall.com/lists/oss-security/2015/12/11/1

www.openwall.com/lists/oss-security/2015/12/11/2

www.openwall.com/lists/oss-security/2015/12/17/10

www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

www.securityfocus.com/bid/80592

access.redhat.com/errata/RHSA-2016:1430

lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E

lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E

security.gentoo.org/glsa/201611-08

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.6%

JSON

Related for NVD:CVE-2015-8540

openvas20 slackware1 amazon1 cvelist1 nessus33 fedora4 prion1 ubuntucve1 mageia1 cve1 cloudfoundry1 ubuntu1 debian3 osv2 ibm26 gentoo1 rosalinux1 suse8 redhat4 aix1