K15880: Libpng vulnerability CVE-2008-6218

Security Advisory Description Memory leak in the pnghandletEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service memory exhaustion via a crafted PNG file. CVE-2008-6218 Impact An attacker may be able to cause a...

SOL15880 - Libpng vulnerability CVE-2008-6218

Recommended action ARX If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the table does not list any version in the column, then no upgrade candidate currently exists. To mitigate th...

openSUSE Security Update : libpng14 (libpng14-4949)

This update of libpng14-14 fixes : - CVE-2011-2501: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Design Error CWE-DesignError - CVE-2011-2690: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 - CVE-2011-2691: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Othe...

SuSE 10 Security Update : libpng (ZYPP Patch Number 7669)

This update of libpng fixes : - CVE-2008-6218: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C: Resource Management Errors CWE-399 - CVE-2011-2690: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 - CVE-2011-2692: CVSS v2 Base Score: 5.0 AV:N/AC:M/Au:N/C:N/I:N/A:P:...

SuSE9 Security Update : libpng (YOU Patch Number 12815)

This update of libpng fixes : - CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C: Resource Management Errors CWE-399. CVE-2008-6218 - CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119. CVE-2011-2690 - CVSS v2 Base Score: 5.0 AV:N/AC:M/Au:N/C:N/I:N/A:P: Buffer Errors...

SuSE 11.1 Security Update : libpng (SAT Patch Number 4948)

This update of libpng12-0 fixes : - CVE-2008-6218: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C: Resource Management Errors CWE-399 - unknown unknown. CVE-2009-5063: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P - CVE-2011-2501: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Desig...

CVE-2008-6218

Libpng vulnerability CVE-2008-6218: memory leak in png_handle_tEXt in pngrutil.c is triggered by a crafted PNG, affecting libpng before 1.2.33 rc02 and 1.4.0 beta36, enabling a context‑dependent DoS due to memory exhaustion. Remediation is to upgrade to fixed Libpng versions (or newer) as indicat...