Lucene search
Ubuntu.comUB:CVE-2008-6218HistoryFeb 20, 2009 - 12:00 a.m.
CVE-2008-6218
2009-02-2000:00:00
ubuntu.com
ubuntu.com
6
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
0.012 Low
EPSS
Percentile
85.2%
Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before
1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a
denial of service (memory exhaustion) via a crafted PNG file.
Notes
| Author | Note |
|---|---|
| jdstrand | Ubuntu versions should not be affected because they do not use png_ptr->chunkdata. This member wasn’t introduced until 1.2.30. |
Related
cve
cve
CVE-2008-6218
2009-02-20 17:30:00
f5
f5
K15880 : Libpng vulnerability CVE-2008-6218
2014-11-27 00:00:00
SOL15880 - Libpng vulnerability CVE-2008-6218
2014-11-27 00:00:00
prion
prion
Memory corruption
2009-02-20 17:30:00
openvas
openvas
Mandriva Update for gdm MDVA-2010:133 (gdm)
2010-04-30 00:00:00
Gentoo Security Advisory GLSA 200903-28 (libpng)
2009-03-20 00:00:00
Mandriva Update for libpng MDVSA-2010:133 (libpng)
2010-07-16 00:00:00
gentoo
gentoo
libpng: Multiple vulnerabilities
2009-03-15 00:00:00
Multiple packages, Multiple vulnerabilities fixed in 2010
2014-12-11 00:00:00
nessus
nessus
GLSA-200903-28 : libpng: Multiple vulnerabilities
2009-03-16 00:00:00
Mandriva Linux Security Advisory : libpng (MDVSA-2010:133)
2010-07-30 00:00:00
SuSE 10 Security Update : libpng (ZYPP Patch Number 7669)
2011-08-18 00:00:00
debian
debian
[SECURITY] [DSA 1750-1] New libpng packages fix several vulnerabilities
2009-03-22 17:16:04
osv
osv
libpng - several vulnerabilities
2009-03-22 00:00:00
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
0.012 Low
EPSS
Percentile
85.2%
Related for UB:CVE-2008-6218