Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2015-0473
HistoryDec 17, 2015 - 12:01 a.m.

Updated libpng packages fix security vulnerabilities

2015-12-1700:01:04
Gentoo Foundation
advisories.mageia.org
13

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

0.12 Low

EPSS

Percentile

95.4%

JSON

Updated libpng and libpng12 packages fix security vulnerability: The fix for CVE-2015-8126 was incomplete. While it defended against the potential overrun while reading PNG files, it did not detect a potential overrun by applications using png_set_PLTE directly (CVE-2015-8472).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchlibpng12< 1.2.55-1libpng12-1.2.55-1.mga5
Mageia5noarchlibpng< 1.6.20-1libpng-1.6.20-1.mga5

Related

nessus 67
openvas 43
fedora 16
prion 2
ibm 14
cve 2
nvd 2
redhat 5
f5 4
slackware 2
centos 3
ubuntucve 2
veracode 3
freebsd 1
archlinux 3
debiancve 2
cvelist 2
oraclelinux 3
debian 5
osv 4
amazon 2
mageia 1
suse 8
ubuntu 1
cloudfoundry 1
rosalinux 1
nessus
nessus
RHEL 7 : libpng (RHSA-2015:2596)
2015-12-10 00:00:00
FreeBSD : libpng buffer overflow in png_set_PLTE (1886e195-8b87-11e5-90e7-b499baebfeaf)
2015-11-16 00:00:00
Fedora 23 : libpng-1.6.17-3.fc23 (2015-4ad4998d00)
2016-03-04 00:00:00
openvas
openvas
Fedora Update for libpng10 FEDORA-2015-3461
2015-12-19 00:00:00
Oracle: Security Advisory (ELSA-2015-2596)
2015-12-10 00:00:00
RedHat Update for libpng RHSA-2015:2596-01
2015-12-10 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: libpng10-1.0.65-1.fc23
2015-12-18 07:58:28
[SECURITY] Fedora 22 Update: libpng15-1.5.25-1.fc22
2016-01-04 20:00:05
[SECURITY] Fedora 23 Update: libpng15-1.5.25-1.fc23
2016-01-04 18:55:22
prion
prion
Buffer overflow
2016-01-21 15:59:00
Buffer overflow
2015-11-13 03:59:00
ibm
ibm
Security Bulletin: Vulnerabilities in libpng affect PowerKVM (CVE-2015-8126, CVE-2015-8472)
2018-06-18 01:30:37
Security Bulletin: IBM Forms Viewer may be affected by a known issue with libpng library (CVE-2015-8126, CVE-2015-8472)
2018-06-16 19:52:51
Security Bulletin: Vulnerabilities in libpng affect Rational DOORS (CVE-2015-8126, CVE-2015-8472)
2020-05-01 08:19:24
cve
cve
CVE-2015-8472
2016-01-21 15:59:00
CVE-2015-8126
2015-11-13 03:59:05
nvd
nvd
CVE-2015-8472
2016-01-21 15:59:00
CVE-2015-8126
2015-11-13 03:59:05
redhat
redhat
(RHSA-2015:2596) Moderate: libpng security update
2015-12-09 13:26:42
(RHSA-2015:2595) Moderate: libpng12 security update
2015-12-09 13:25:59
(RHSA-2015:2594) Moderate: libpng security update
2015-12-09 00:00:00
f5
f5
SOL81903701 - Libpng vulnerability CVE-2015-8472
2016-03-07 00:00:00
K81903701 : Libpng vulnerability CVE-2015-8472
2016-03-07 00:00:00
SOL76930736 - Libpng vulnerability CVE-2015-8126
2015-12-18 00:00:00
slackware
slackware
[slackware-security] libpng
2015-12-16 06:25:09
[slackware-security] libpng
2015-12-03 08:20:21
centos
centos
libpng security update
2015-12-09 19:21:36
libpng12 security update
2015-12-09 19:21:50
libpng security update
2015-12-09 14:47:29
ubuntucve
ubuntucve
CVE-2015-8472
2015-12-09 00:00:00
CVE-2015-8126
2015-11-12 00:00:00
veracode
veracode
Denial-of-Service (DoS) Via Embedded Dependency
2017-02-27 07:42:41
Buffer Overflow
2017-02-08 02:19:46
Buffer Overflow
2017-02-06 08:35:04
freebsd
freebsd
libpng buffer overflow in png_set_PLTE
2015-11-15 00:00:00
archlinux
archlinux
libpng: buffer overflow
2015-12-28 00:00:00
lib32-libpng: multiple issues
2015-11-17 00:00:00
libpng: multiple issues
2015-11-17 00:00:00
debiancve
debiancve
CVE-2015-8472
2016-01-21 15:59:00
CVE-2015-8126
2015-11-13 03:59:00
cvelist
cvelist
CVE-2015-8472
2016-01-21 15:00:00
CVE-2015-8126
2015-11-13 02:00:00
oraclelinux
oraclelinux
libpng security update
2015-12-09 00:00:00
libpng security update
2015-12-09 00:00:00
libpng12 security update
2015-12-09 00:00:00
debian
debian
[SECURITY] [DSA 3443-1] libpng security update
2016-01-13 21:31:22
[SECURITY] [DSA 3443-1] libpng security update
2016-01-13 21:31:22
[SECURITY] [DLA 375-1] libpng security update
2015-12-27 21:02:26
osv
osv
libpng - security update
2016-01-13 00:00:00
libpng - security update
2015-12-27 00:00:00
libpng - security update
2015-11-18 00:00:00
amazon
amazon
Medium: libpng
2015-11-23 13:43:00
Medium: libpng
2015-12-14 10:00:00
mageia
mageia
Updated libpng/libpng12 packages fix security vulnerability
2015-11-20 01:08:19
suse
suse
Security update for libpng16 (important)
2015-11-25 21:14:06
Security update for libpng12 (important)
2015-11-25 21:13:40
Security update for java-1_8_0-openjdk (critical)
2016-01-27 21:11:29
ubuntu
ubuntu
libpng vulnerabilities
2016-01-06 00:00:00
cloudfoundry
cloudfoundry
USN-2861-1 libpng vulnerability | Cloud Foundry
2016-01-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1884
2021-07-02 17:16:15

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

0.12 Low

EPSS

Percentile

95.4%

JSON
Related for MGASA-2015-0473
nessus67openvas43fedora16prion2ibm14cve2nvd2redhat5f54slackware2centos3ubuntucve2veracode3freebsd1archlinux3debiancve2cvelist2oraclelinux3debian5osv4amazon2mageia1suse8ubuntu1cloudfoundry1rosalinux1