Updated freetype2 packages fix security vulnerability

A heap buffer overflow has been found in freetype2 before 2.10.4. Malformed TTF files with PNG sbit glyphs can cause a heap buffer overflow in LoadSBitPng as libpng uses the original 32-bit values, which are saved in pngstruct. If the original width and/or height are greater than 65535, the...

CentOS 7 : libpng (RHSA-2020:3901)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3901 advisory. - libpng before 1.6.32 does not properly check the length of chunks against the user limit. CVE-2017-12652 Note that Nessus has not tested for this issue but ha...

[ASA-202010-11] lib32-freetype2: arbitrary code execution

Arch Linux Security Advisory ASA-202010-11 ========================================== Severity: High Date : 2020-10-20 CVE-ID : CVE-2020-15999 Package : lib32-freetype2 Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1255 Summary ======= The package...

Oracle Linux 7 : libpng (ELSA-2020-3901)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3901 advisory. - Fix CVE-2017-12652 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

libpng security update

2:1.5.13-8 - Fix CVE-2017-12652 - Resolves: 1744870...

Low: Red Hat Security Advisory: libpng security update

An update for libpng is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Security Bulletin: Security vulnerability has been identified in BigFix Platform shipped with IBM License Metric Tool.

Summary BigFix Platform is shipped with IBM License Metric Tool. Information about a security vulnerability affecting BigFix Platform has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-5435 DESCRIPTION: cURL libcurl is vulnerable to a heap-based buffer overflow, caus...

Security Bulletin: Multiple vulnerabilities in the IBM SDK, Java Technology Edition affects IBM Performance Management products

Summary Multiple vulnerabilities in the IBM SDK, Java Technology Edition affects IBM Performance Management products Vulnerability Details CVEID: CVE-2019-2766 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded Networking component could allow an...

Security Bulletin: Libpng vulnerabilities affect IBM SmartCloud Entry (CVE-2015-8126 CVE-2015-7981 CVE-2015-8472)

Summary IBM SmartCloud Entry is vulnerable to several Libpng vulnerabilities. Remote attackers can exploit them to obtain sensitive information or execute arbitrary code on the system. Vulnerability Details CVEID: CVE-2015-8126 DESCRIPTION: libpng is vulnerable to a buffer overflow, caused by...

EulerOS 2.0 SP2 : libpng (EulerOS-SA-2020-1661)

According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in the pngcombinerow function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might...

Huawei EulerOS: Security Advisory for libpng (EulerOS-SA-2020-1661)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Multiple Vulnerabilities in libpng and libxml affect Rational DOORS

Summary Multiple vulnerabilities in libpng and libxml affect Rational DOORS Vulnerability Details CVE-ID: CVE-2015-1819 Description: Libxml is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error in the xmlreader when processing XML data. A remote attacker could...

Security Bulletin: Security vulnerabilities in Rational DOORS (CVE-2014-3613, CVE-2014-3620, CVE-2014-8730, CVE-2014-9495, CVE-2015-0973)

Summary IBM Rational DOORS contains multiple security vulnerabilities. Vulnerability Details Rational DOORS is affected by the following vulnerabilities disclosed in and corrected by Rational DOORS fix pack releases: CVE ID: CVE-2014-3613 Description: cURL/libcURL could allow a remote attacker to...

Security Bulletin: Vulnerabilities in libpng affect Rational DOORS (CVE-2015-8126, CVE-2015-8472)

Summary Vulnerabilities in libpng affect Rational DOORS. Vulnerability Details CVEID: CVE-2015-8126 DESCRIPTION: libpng is vulnerable to a buffer overflow, caused by improper bounds checking by the pngsetPLTE and pnggetPLTE functions. By persuading a victim to open a specially-crafted PNG file, a...

Huawei EulerOS: Security Advisory for libpng (EulerOS-SA-2020-1496)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : libpng (EulerOS-SA-2020-1496)

According to the versions of the libpng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service crash via a crafted ima...

Arbitrary Code Execution

libpng is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the way libpng processed compressed chunks in PNG image files. An attacker could create a specially-crafted PNG image file that, when opened, could cause an application using libpng to crash or,...

Denial Of Service (DoS)

libpng is vulnerable to denial of service DoS. The vulnerability exists as an out-of-bounds memory read flaw was found in the way libpng processed certain PNG image files. An attacker could create a specially-crafted PNG image that, when opened, could cause an application using libpng to crash...

Denial Of Service (DoS)

libpng is vulnerable to denial of service. An uninitialized memory read issue was found in the way libpng processed certain PNG images that use the Physical Scale sCAL extension. An attacker could create a specially-crafted PNG image that, when opened, could cause an application using libpng to...

Arbitrary Code Execution

libpng is vulnerable to arbitrary code execution. The vulnerability exists as a buffer overflow flaw was found in the way libpng processed certain PNG image files. An attacker could create a specially-crafted PNG image that, when opened, could cause an application using libpng to crash or,...