Lucene search

K

Veracode Vulnerability DatabaseVERACODE:13707

HistoryApr 29, 2019 - 11:37 a.m.

Denial Of Service (DoS)

2019-04-2911:37:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7

0.005 Low

EPSS

Percentile

75.4%

libpng is vulnerable to denial of service. Invoking png_image_free under png_safe_execute results in a use-after-free bug that causes the application to crash or allow arbitrary code execution.

CPENameOperatorVersion
libpngle1.6.35
libpngle1.6.28.1
firefoxeq38.6.1__1.el6_7
firefoxeq3.6.17__1.el6_0
firefoxeq31.5.0__1.el6_6
firefoxeq24.4.0__1.el6_5
firefoxeq10.0.8__1.el6_3
firefoxeq38.7.0__1.el6_7
firefoxeq10.0.5__1.el6_2
firefoxeq3.6.14__4.el6_0

Rows per page:

1-10 of 4201

References

lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html

lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html

lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html

lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html

lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html

packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html

www.securityfocus.com/bid/108098

access.redhat.com/errata/RHSA-2019:1265

access.redhat.com/errata/RHSA-2019:1267

access.redhat.com/errata/RHSA-2019:1269

access.redhat.com/errata/RHSA-2019:1308

access.redhat.com/errata/RHSA-2019:1309

access.redhat.com/errata/RHSA-2019:1310

access.redhat.com/errata/RHSA-2019:2494

access.redhat.com/errata/RHSA-2019:2495

access.redhat.com/errata/RHSA-2019:2585

access.redhat.com/errata/RHSA-2019:2590

access.redhat.com/errata/RHSA-2019:2592

access.redhat.com/errata/RHSA-2019:2737

bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803

github.com/glennrp/libpng/commit/9c0d5c77bf5bf2d7c1e11f388de40a70e0191550

github.com/glennrp/libpng/issues/275

lists.debian.org/debian-lts-announce/2019/05/msg00032.html

lists.debian.org/debian-lts-announce/2019/05/msg00038.html

seclists.org/bugtraq/2019/Apr/30

seclists.org/bugtraq/2019/Apr/36

seclists.org/bugtraq/2019/May/56

seclists.org/bugtraq/2019/May/59

seclists.org/bugtraq/2019/May/67

security.gentoo.org/glsa/201908-02

security.netapp.com/advisory/ntap-20190719-0005/

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us

usn.ubuntu.com/3962-1/

usn.ubuntu.com/3991-1/

usn.ubuntu.com/3997-1/

usn.ubuntu.com/4080-1/

usn.ubuntu.com/4083-1/

www.debian.org/security/2019/dsa-4435

www.debian.org/security/2019/dsa-4448

www.debian.org/security/2019/dsa-4451

www.oracle.com/security-alerts/cpuApr2021.html

www.oracle.com/security-alerts/cpuoct2021.html

www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

0.005 Low

EPSS

Percentile

75.4%