Veracode Vulnerability DatabaseVERACODE:24739Denial Of Service (DoS)
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
libpng is vulnerable to denial of service (DoS). The vulnerability exists as an out-of-bounds memory read flaw was found in the way libpng processed certain PNG image files. An attacker could create a specially-crafted PNG image that, when opened, could cause an application using libpng to crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libpng | eq | 1.2.44__1.el6 | |
| libpng | eq | 1.2.44__1.el6 |
References
libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commit;h=65e6d5a34f49acdb362a0625a706c6b914e670af
lists.fedoraproject.org/pipermail/package-announce/2011-July/062720.html
lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html
secunia.com/advisories/45046
secunia.com/advisories/45289
secunia.com/advisories/45405
secunia.com/advisories/45415
secunia.com/advisories/45460
secunia.com/advisories/45486
secunia.com/advisories/45492
secunia.com/advisories/49660
security.gentoo.org/glsa/glsa-201206-15.xml
slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.617466
sourceforge.net/mailarchive/forum.php?thread_name=BANLkTikrnU6FJNQYFvwmt78hwpgKPVRd1Q%40mail.gmail.com&forum_name=png-mng-implement
www.debian.org/security/2011/dsa-2287
www.mandriva.com/security/advisories?name=MDVSA-2011:151
www.openwall.com/lists/oss-security/2011/06/27/13
www.openwall.com/lists/oss-security/2011/06/28/16
www.redhat.com/support/errata/RHSA-2011-1105.html
www.securityfocus.com/bid/48474
www.ubuntu.com/usn/USN-1175-1
access.redhat.com/errata/RHSA-2011:1105
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=717084
exchange.xforce.ibmcloud.com/vulnerabilities/68517
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P