PT-2022-6893 · Libpng +1 · Libpng +1

Name of the Vulnerable Software and Affected Versions: libpng affected versions not specified Description: The issue is caused by a heap overflow flaw in the pngimage.c component of the libpng library. This flaw can be exploited by an attacker with local network access, allowing them to pass a...

libpng 缓冲区错误漏洞

libpng is a PNG reference library that enables the creation, reading and writing of PNG graphics files. A buffer error vulnerability exists in libpng, which stems from a flaw in its pngimage.c component that allows an attacker with local network access to pass a specially crafted PNG file to a PN...

CVE-2021-4214

CVE-2021-4214 describes a heap overflow in libpng’s pngimage.c. The flaw can be triggered by an attacker who has local network access and must supply a specially crafted PNG to the pngimage utility, causing an application crash and resulting in a denial of service. The vulnerability details speci...

libpng pngcheck 缓冲区错误漏洞

libpng pngcheck is a software written in C by the libpng organization that verifies the integrity of PNG, JNG and MNG files based on checking the internal 32-bit CRC, aka checksum and decompressing the image data. A buffer error vulnerability exists in libpng pngcheck version 2.4.0, which stems...

Security Bulletin: Gdal vulnerabilities affect IBM Netezza Analytics for NPS

Summary IBM Netezza Analytics for NPS uses gdal version 1.7.2. IBM Netezza Analytics for NPS has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2011-3045 DESCRIPTION: libpng is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the pnginflate...

Ubuntu 16.04 ESM : libpng vulnerabilities (USN-5432-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5432-1 advisory. It was discovered that libpng incorrectly handled memory when parsing certain PNG files. If a user or automated system were tricked into opening a...

USN-5432-1: libpng vulnerabilities

It was discovered that libpng incorrectly handled memory when parsing certain PNG files. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of service, or possible execute arbitrary...

USN-5432-1 libpng vulnerabilities

It was discovered that libpng incorrectly handled memory when parsing certain PNG files. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of service, or possible execute arbitrary...

new packages: libpng

An update is available for libpng. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

Slackware: Security Advisory (SSA:2016-365-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2015-349-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2015-337-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2015-351-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2019-107-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Corretto Java 11.x < 11.0.4.11.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.4.11.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-11-2019-Jul-16 advisory. - Security CVE-2019-2745, CVE-2019-2786, CVE-2019-2818 - Utilities CVE-2019-2762, CVE-2019-2769 -...

Amazon Corretto Java 8.x < 8.222.10.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is prior to 8 8.222.10.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-8-2019-Jul-16 advisory. - Security CVE-2019-2745, CVE-2019-2786 - Utilities CVE-2019-2762, CVE-2019-2769 - Networking...

Denial Of Service (DoS)

libpng is vulnerable to denial of service. The vulnerability exists due to an absolute path in the export script that crashes when reading multiple zTXT chunks...

Mageia: Security Advisory (MGASA-2015-0008)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0020)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0421)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...