Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-0333
HistoryFeb 27, 2014 - 12:00 a.m.

CVE-2014-0333

2014-02-2700:00:00
ubuntu.com
ubuntu.com
11

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON

The png_push_read_chunk function in pngpread.c in the progressive decoder
in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of
service (infinite loop and CPU consumption) via an IDAT chunk with a length
of zero.

Notes

Author Note
mdeslaur only 1.6.0+
jdstrand libpng1.6 1.6.8-2 is affected, but not in the Ubuntu archive

Related

seebug 1
prion 1
nessus 7
cert 1
mageia 1
cve 1
openvas 5
debiancve 1
securityvulns 2
fedora 2
gentoo 1
seebug
seebug
libpngζ‹’η»ζœεŠ‘ζΌζ΄ž
2014-02-27 00:00:00
prion
prion
Design/Logic Flaw
2014-02-27 20:55:00
nessus
nessus
openSUSE Security Update : libpng16 (openSUSE-SU-2014:0358-1)
2014-06-13 00:00:00
Fedora 20 : libpng-1.6.6-3.fc20 (2014-6631)
2014-05-29 00:00:00
Fedora 20 : mingw-libpng-1.6.10-1.fc20 (2014-4564)
2014-04-03 00:00:00
cert
cert
libpng denial-of-service vulnerability
2014-02-25 00:00:00
mageia
mageia
Updated libpng package fixes security vulnerability
2014-03-15 20:29:56
cve
cve
CVE-2014-0333
2014-02-27 20:55:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0131)
2022-01-28 00:00:00
Fedora Update for libpng FEDORA-2014-6631
2014-06-02 00:00:00
Fedora Update for mingw-libpng FEDORA-2014-4564
2014-04-03 00:00:00
debiancve
debiancve
CVE-2014-0333
2014-02-27 20:55:00
securityvulns
securityvulns
[ MDVSA-2015:090 ] libpng
2015-04-20 00:00:00
libpng security vulnerabilities
2015-04-20 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: libpng-1.6.6-3.fc20
2014-05-28 23:54:45
[SECURITY] Fedora 20 Update: mingw-libpng-1.6.10-1.fc20
2014-04-02 09:27:10
gentoo
gentoo
libpng: Multiple vulnerabilities
2014-08-14 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON
Related for UB:CVE-2014-0333
seebug1prion1nessus7cert1mageia1cve1openvas5debiancve1securityvulns2fedora2gentoo1