Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5432-1
HistoryMay 23, 2022 - 12:00 a.m.

libpng vulnerabilities

2022-05-2300:00:00
ubuntu.com
108
libpng
ubuntu 16.04 esm
denial of service
arbitrary code execution
png files
memory handling
cve-2017-12652
cve-2018-14048

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.032

Percentile

91.4%

JSON

Releases

  • Ubuntu 16.04 ESM

Packages

  • libpng - PNG (Portable Network Graphics) file library

Details

It was discovered that libpng incorrectly handled memory when parsing
certain PNG files. If a user or automated system were tricked into opening
a specially crafted PNG file, an attacker could use this issue to cause
libpng to crash, resulting in a denial of service, or possible execute
arbitrary code. (CVE-2017-12652)

Zhengxiong Luo discovered that libpng incorrectly handled memory when parsing
certain PNG files. If a user or automated system were tricked into opening
a specially crafted PNG file, an attacker could use this issue to cause
libpng to crash, resulting in a denial of service, or possible execute
arbitrary code. (CVE-2018-14048)

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchlibpng12-0< 1.2.54-1ubuntu1.1+esm1UNKNOWN
Ubuntu16.04noarchlibpng12-0< 1.2.54-1ubuntu1.1UNKNOWN
Ubuntu16.04noarchlibpng12-0-dbgsym< 1.2.54-1ubuntu1.1UNKNOWN
Ubuntu16.04noarchlibpng12-0-udeb< 1.2.54-1ubuntu1.1UNKNOWN
Ubuntu16.04noarchlibpng12-0-udeb-dbgsym< 1.2.54-1ubuntu1.1UNKNOWN
Ubuntu16.04noarchlibpng12-dev< 1.2.54-1ubuntu1.1UNKNOWN
Ubuntu16.04noarchlibpng3< 1.2.54-1ubuntu1.1UNKNOWN
Ubuntu16.04noarchlibpng12-dev< 1.2.54-1ubuntu1.1+esm1UNKNOWN
Ubuntu16.04noarchlibpng3< 1.2.54-1ubuntu1.1+esm1UNKNOWN

Related

osv 5
openvas 14
nessus 31
ubuntu 1
cve 2
alpinelinux 1
veracode 2
redhatcve 2
ubuntucve 2
debiancve 2
prion 2
cvelist 2
nvd 2
redhat 5
f5 1
oraclelinux 1
centos 1
amazon 1
ics 1
ibm 6
gentoo 1
slackware 1
photon 12
oracle 1
osv
osv
libpng1.6 vulnerabilities
2022-05-24 14:21:04
libpng vulnerabilities
2022-05-23 10:45:47
CVE-2018-14048
2018-07-13 16:29:00
openvas
openvas
Ubuntu: Security Advisory (USN-5432-1)
2022-08-26 00:00:00
Ubuntu: Security Advisory (USN-5432-2)
2023-01-27 00:00:00
Oracle OpenJDK 'libpng' Vulnerability (CVE-2018-14048)
2021-09-08 00:00:00
nessus
nessus
Ubuntu 16.04 ESM : libpng vulnerabilities (USN-5432-2)
2023-10-20 00:00:00
Ubuntu 16.04 ESM : libpng vulnerabilities (USN-5432-1)
2022-05-24 00:00:00
Photon OS 3.0: Libpng PHSA-2023-3.0-0655
2024-07-24 00:00:00
ubuntu
ubuntu
libpng vulnerabilities
2022-05-24 00:00:00
cve
cve
CVE-2018-14048
2018-07-13 16:29:00
CVE-2017-12652
2019-07-10 15:15:10
alpinelinux
alpinelinux
CVE-2018-14048
2018-07-13 16:29:00
veracode
veracode
Memory Leak
2018-07-27 08:15:59
Denial Of Service (DoS)
2019-07-11 10:12:02
redhatcve
redhatcve
CVE-2018-14048
2020-01-13 03:30:30
CVE-2017-12652
2019-07-29 16:05:22
ubuntucve
ubuntucve
CVE-2018-14048
2018-07-13 00:00:00
CVE-2017-12652
2019-07-10 00:00:00
debiancve
debiancve
CVE-2018-14048
2018-07-13 16:29:00
CVE-2017-12652
2019-07-10 15:15:10
prion
prion
Information disclosure
2018-07-13 16:29:00
Code injection
2019-07-10 15:15:00
cvelist
cvelist
CVE-2018-14048
2018-07-13 16:00:00
CVE-2017-12652
2019-07-10 14:10:07
nvd
nvd
CVE-2018-14048
2018-07-13 16:29:00
CVE-2017-12652
2019-07-10 15:15:10
redhat
redhat
(RHSA-2020:3901) Low: libpng security update
2020-09-29 07:42:02
(RHSA-2020:4255) Moderate: security update - Red Hat Ansible Tower 3.6 runner release (CVE-2019-18874)
2020-10-14 12:51:09
(RHSA-2020:4254) Moderate: security update - Red Hat Ansible Tower 3.7 runner release (CVE-2019-18874)
2020-10-14 12:50:53
f5
f5
K88124225 : libpng vulnerability CVE-2017-12652
2019-09-17 00:00:00
oraclelinux
oraclelinux
libpng security update
2020-10-06 00:00:00
centos
centos
libpng security update
2020-10-20 18:23:22
amazon
amazon
Low: libpng
2020-10-22 18:17:00
ics
ics
Rockwell Automation PanelView 800
2023-09-28 12:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in libpng affects IBM Watson Studio Local
2019-12-18 17:42:32
Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities (CVE-2020-1971, CVE-2020-15999, CVE-2017-12652)
2021-08-16 07:01:26
Security Bulletin: Security vulnerability has been identified in BigFix Platform shipped with IBM License Metric Tool.
2020-08-12 08:19:22
gentoo
gentoo
libpng: Multiple vulnerabilities
2019-08-03 00:00:00
slackware
slackware
[slackware-security] libpng
2019-04-17 21:20:24
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0033
2023-06-21 00:00:00
Moderate Photon OS Security Update - PHSA-2023-3.0-0655
2023-09-26 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0246
2019-07-26 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2018
2018-12-18 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.032

Percentile

91.4%

JSON
Related for USN-5432-1
osv5openvas14nessus31ubuntu1cve2alpinelinux1veracode2redhatcve2ubuntucve2debiancve2prion2cvelist2nvd2redhat5f51oraclelinux1centos1amazon1ics1ibm6gentoo1slackware1photon12oracle1