CVEvulnerability
CVE-2015-8540
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-04-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.
Affected configurations
• redhat enterprise linux desktop supplementary 5.0
• redhat enterprise linux desktop supplementary 6.0
• redhat enterprise linux hpc node 6.0
• redhat enterprise linux server supplementary 5.0
• redhat enterprise linux server supplementary 6.0
• redhat enterprise linux workstation supplementary 6.0
• libpng libpng 1.2.0
• libpng libpng 1.2.1
• libpng libpng 1.2.2
• libpng libpng 1.2.3
• libpng libpng 1.2.4
• libpng libpng 1.2.5
• libpng libpng 1.2.6
• libpng libpng 1.2.7
• libpng libpng 1.2.8
• libpng libpng 1.2.9
• libpng libpng 1.2.10
• libpng libpng 1.2.11
• libpng libpng 1.2.12
• libpng libpng 1.2.13
• libpng libpng 1.2.14
• libpng libpng 1.2.15
• libpng libpng 1.2.16
• libpng libpng 1.2.17
• libpng libpng 1.2.18
• libpng libpng 1.2.19
• libpng libpng 1.2.20
• libpng libpng 1.2.21
• libpng libpng 1.2.22
• libpng libpng 1.2.23
• libpng libpng 1.2.24
• libpng libpng 1.2.25
• libpng libpng 1.2.26
• libpng libpng 1.2.27
• libpng libpng 1.2.28
• libpng libpng 1.2.29
• libpng libpng 1.2.30
• libpng libpng 1.2.31
• libpng libpng 1.2.32
• libpng libpng 1.2.33
• libpng libpng 1.2.34
• libpng libpng 1.2.35
• libpng libpng 1.2.36
• libpng libpng 1.2.37
• libpng libpng 1.2.38
• libpng libpng 1.2.39
• libpng libpng 1.2.40
• libpng libpng 1.2.41
• libpng libpng 1.2.42
• libpng libpng 1.2.43
• libpng libpng 1.2.44
• libpng libpng 1.2.45
• libpng libpng 1.2.46
• libpng libpng 1.2.47
• libpng libpng 1.2.48
• libpng libpng 1.2.49
• libpng libpng 1.2.50
• libpng libpng 1.2.51
• libpng libpng 1.2.52
• libpng libpng 1.2.53
… and 120 more
Related
Weakness · not in database (1)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174435.html lists.fedoraproject.org
- http://sourceforge.net/p/libpng/bugs/244/ sourceforge.net
- http://sourceforge.net/p/libpng/code/ci/d9006f683c641793252d92254a75ae9b815b42ed/ sourceforge.net
- http://sourceforge.net/projects/libpng/files/libpng10/1.0.66/ Patch
- http://sourceforge.net/projects/libpng/files/libpng12/1.2.56/ Patch
- http://sourceforge.net/projects/libpng/files/libpng14/1.4.19/ Patch
- http://sourceforge.net/projects/libpng/files/libpng15/1.5.26/ Patch
- http://www.debian.org/security/2016/dsa-3443 www.debian.org
- http://www.openwall.com/lists/oss-security/2015/12/10/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/12/10/7 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/12/11/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/12/11/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/12/17/10 www.openwall.com
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html www.oracle.com
- http://www.securityfocus.com/bid/80592 www.securityfocus.com
- https://access.redhat.com/errata/RHSA-2016:1430 access.redhat.com
- https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E lists.apache.org
- https://security.gentoo.org/glsa/201611-08 security.gentoo.org
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174435.html lists.fedoraproject.org
- http://sourceforge.net/p/libpng/bugs/244/ sourceforge.net
- http://sourceforge.net/p/libpng/code/ci/d9006f683c641793252d92254a75ae9b815b42ed/ sourceforge.net
- http://sourceforge.net/projects/libpng/files/libpng10/1.0.66/ Patch
- http://sourceforge.net/projects/libpng/files/libpng12/1.2.56/ Patch
- http://sourceforge.net/projects/libpng/files/libpng14/1.4.19/ Patch
- http://sourceforge.net/projects/libpng/files/libpng15/1.5.26/ Patch
- http://www.debian.org/security/2016/dsa-3443 www.debian.org
- http://www.openwall.com/lists/oss-security/2015/12/10/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/12/10/7 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/12/11/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/12/11/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/12/17/10 www.openwall.com
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html www.oracle.com
- http://www.securityfocus.com/bid/80592 www.securityfocus.com
- https://access.redhat.com/errata/RHSA-2016:1430 access.redhat.com
- https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E lists.apache.org
- https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E lists.apache.org
- https://security.gentoo.org/glsa/201611-08 security.gentoo.org