OESA-2024-2091 syslinux security update

Security Fixes: The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service application crash via a crafted PNG image that triggers an out-of-bounds read during the...

Photon OS 3.0: Libpng PHSA-2023-3.0-0655

An update of the libpng package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0655. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Libpng PHSA-2019-3.0-0014

An update of the libpng package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CBL Mariner 2.0 Security Update: libpng / tensorflow (CVE-2022-3857)

The version of libpng / tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3857 advisory. - NIST NVD Details CVE-2022-3857 Note that Nessus has not tested for this issue but has instead...

CVE-2022-3857 affecting package libpng for versions less than 1.6.39-1

CVE-2022-3857 affecting package libpng for versions less than 1.6.39-1. An upgraded version of the package is available that resolves this issue...

OPENSUSE-SU-2024:13577-1 libpng16-16-1.6.40-2.1 on GA media

These are all security issues fixed in the libpng16-16-1.6.40-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10971-1 libpng12-0-1.2.59-1.9 on GA media

These are all security issues fixed in the libpng12-0-1.2.59-1.9 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10972-1 libpng16-16-1.6.37-3.3 on GA media

These are all security issues fixed in the libpng16-16-1.6.37-3.3 package on the GA media of openSUSE Tumbleweed...

RHEL 7 : libpng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libpng: underflow read in pngcheckkeyword CVE-2015-8540 - The pngsettext2 function in libpng 0.71 before...

RHEL 5 : libpng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libpng: underflow read in pngcheckkeyword CVE-2015-8540 - The pngpushreadzTXt function in pngpread.c in...

RHEL 4 : libpng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libpng: memory corruption flaw CVE-2011-3048 - libpng: Out-of-bounds read in pngconverttorfc1123...

RHEL 9 : libpng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libpng: Null pointer dereference leads to segmentation fault CVE-2022-3857 Note that Nessus has not tested for this...

RHEL 8 : libpng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libpng: underflow read in pngcheckkeyword CVE-2015-8540 - pngimagefree in png.c in libpng 1.6.x before...

RHEL 6 : libpng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libpng: underflow read in pngcheckkeyword CVE-2015-8540 - The pngsettext2 function in libpng 0.71 before...

RHEL 5 : libpng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libpng: does not check length of chunks against user limit CVE-2017-12652 - The pngsettext2 function in...

RHEL 6 : libpng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libpng: does not check length of chunks against user limit CVE-2017-12652 - The pngsettext2 function in...

RHEL 8 : libpng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libpng: use-after-free in pngimagefree in png.c CVE-2019-7317 Note that Nessus has not tested for this issue but ha...

RHEL 7 : libpng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libpng: NULL pointer dereference in pngsettext2 CVE-2016-10087 - A flaw was found in libpng 1.6.38. A...

Advisory ROSA-SA-2024-2328

Software: libpng 1.6.34 OS: ROSA Virtualization 2.1 packageevrstring: libpng-1.6.34-5.0.1.rv3.src.rpm CVE-ID: CVE-2019-7317 BDU-ID: 2019-03330 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the pngimagefree function png.c of the PNG libpng bitmap graphics library involves the pngimagefreefunction...

Ubuntu 16.04 ESM : libpng vulnerabilities (USN-5432-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5432-2 advisory. USN-5432-1 fixed vulnerabilities in libpng. This update provides the corresponding updates for libpng1.6. Tenable has extracted the preceding description...