Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:DLA-343-1
HistoryNov 17, 2015 - 12:00 a.m.

libpng - security update

2015-11-1700:00:00
Google
osv.dev
6

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.039 Low

EPSS

Percentile

90.7%

JSON
  • CVE-2015-7981
    Added a safety check in png_set_tIME() (Bug report from Qixue Xiao).
  • CVE-2015-8126
    Multiple buffer overflows in the (1) png_set_PLTE and
    (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x
    before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24,
    and 1.6.x before 1.6.19 allow remote attackers to cause a denial
    of service (application crash) or possibly have unspecified other
    impact via a small bit-depth value in an IHDR (aka image header)
    chunk in a PNG image.
  • CVE-2012-3425
    vulnerable code is not present here

Related

nessus 66
ubuntu 1
openvas 41
debian 6
fedora 16
ibm 14
suse 7
osv 3
archlinux 3
slackware 2
oraclelinux 3
redhat 4
centos 3
gentoo 1
ubuntucve 4
cve 4
mageia 3
prion 4
f5 6
veracode 3
debiancve 2
amazon 2
freebsd 1
nessus
nessus
Ubuntu 14.04 LTS : libpng vulnerabilities (USN-2815-1)
2015-11-20 00:00:00
Debian DLA-343-1 : libpng security update
2015-11-18 00:00:00
openSUSE Security Update : libpng12 (openSUSE-2015-826)
2015-11-30 00:00:00
ubuntu
ubuntu
libpng vulnerabilities
2015-11-19 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-343-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-2815-1)
2015-11-20 00:00:00
openSUSE: Security Advisory for libpng12 (openSUSE-SU-2015:2099-1)
2015-12-29 00:00:00
debian
debian
[SECURITY] [DLA 343-1] libpng security update
2015-11-17 21:28:08
[SECURITY] [DSA 3399-1] libpng security update
2015-11-18 19:55:41
[SECURITY] [DSA 3399-1] libpng security update
2015-11-18 19:55:41
fedora
fedora
[SECURITY] Fedora 23 Update: libpng10-1.0.64-1.fc23
2015-11-24 19:54:37
[SECURITY] Fedora 22 Update: libpng10-1.0.64-1.fc22
2015-11-24 22:26:48
[SECURITY] Fedora 21 Update: libpng10-1.0.64-1.fc21
2015-11-24 22:50:52
ibm
ibm
Security Bulletin: Vulnerabilities in libpng affect IBM Integrated Management Module (IMM) (CVE-2015-7981, CVE-2015-8126)
2023-04-14 14:32:25
Security Bulletin: IBM Flex System Manager (FSM) is affected by libpng vulnerabilities (CVE-2015-7981, CVE-2015-8126)
2018-06-18 01:32:48
Security Bulletin: Vulnerabilities in libpng affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter systems (CVE-2015-8126 CVE-2015-7981)
2023-04-14 14:32:25
suse
suse
Security update for libpng12 (important)
2015-11-25 21:13:40
Security update for vlc (important)
2016-06-22 14:10:14
Security update for libpng16 (important)
2015-11-25 21:14:06
osv
osv
libpng - security update
2015-11-18 00:00:00
libpng - security update
2015-12-27 00:00:00
libpng - security update
2016-01-13 00:00:00
archlinux
archlinux
libpng: multiple issues
2015-11-17 00:00:00
lib32-libpng: multiple issues
2015-11-17 00:00:00
libpng: buffer overflow
2015-12-28 00:00:00
slackware
slackware
[slackware-security] libpng
2015-12-03 08:20:21
[slackware-security] libpng
2015-12-16 06:25:09
oraclelinux
oraclelinux
libpng12 security update
2015-12-09 00:00:00
libpng security update
2015-12-09 00:00:00
libpng security update
2015-12-09 00:00:00
redhat
redhat
(RHSA-2015:2595) Moderate: libpng12 security update
2015-12-09 13:25:59
(RHSA-2015:2594) Moderate: libpng security update
2015-12-09 00:00:00
(RHSA-2015:2596) Moderate: libpng security update
2015-12-09 13:26:42
centos
centos
libpng12 security update
2015-12-09 19:21:50
libpng security update
2015-12-09 14:47:29
libpng security update
2015-12-09 19:21:36
gentoo
gentoo
libpng: Multiple vulnerabilities
2016-11-15 00:00:00
ubuntucve
ubuntucve
CVE-2012-3425
2012-08-13 00:00:00
CVE-2015-7981
2015-10-26 00:00:00
CVE-2015-8126
2015-11-12 00:00:00
cve
cve
CVE-2012-3425
2012-08-13 20:55:00
CVE-2015-7981
2015-11-24 20:59:00
CVE-2015-8126
2015-11-13 03:59:00
mageia
mageia
Updated libpng12 package fixes security vulnerability
2015-10-30 23:11:10
Updated libpng/libpng12 packages fix security vulnerability
2015-11-20 01:08:19
Updated libpng packages fix security vulnerabilities
2015-12-17 00:01:04
prion
prion
Out-of-bounds
2012-08-13 20:55:00
Out-of-bounds
2015-11-24 20:59:00
Buffer overflow
2015-11-13 03:59:00
f5
f5
K21057235 : libpng out-of-bounds read vulnerability CVE-2015-7981
2016-02-26 00:00:00
SOL21057235 - libpng out-of-bounds read vulnerability CVE-2015-7981
2016-02-26 00:00:00
K76930736 : Libpng vulnerability CVE-2015-8126
2015-12-19 00:00:00
veracode
veracode
Information Disclosure
2019-01-15 09:09:23
Buffer Overflow
2017-02-08 02:19:46
Denial-of-Service (DoS) Via Embedded Dependency
2017-02-27 07:42:41
debiancve
debiancve
CVE-2015-8126
2015-11-13 03:59:00
CVE-2015-8472
2016-01-21 15:59:00
amazon
amazon
Medium: libpng
2015-11-23 13:43:00
Medium: libpng
2015-12-14 10:00:00
freebsd
freebsd
libpng buffer overflow in png_set_PLTE
2015-11-15 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.039 Low

EPSS

Percentile

90.7%

JSON
Related for OSV:DLA-343-1
nessus66ubuntu1openvas41debian6fedora16ibm14suse7osv3archlinux3slackware2oraclelinux3redhat4centos3gentoo1ubuntucve4cve4mageia3prion4f56veracode3debiancve2amazon2freebsd1