Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted PNG file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade x11-misc/slim.Upgrade media-tv/dvbstreamer.Upgrade dev-libs/liblzw.Upgrade app-arch/gzip.Upgrade media-gfx/splashutils.Upgrade sys-apps/acl.Upgrade sys-devel/m4.Upgrade app-text/dvipng.Upgrade net-misc/iputils.Upgrade www-client/uzbl.Upgrade kde-base/kdm.Upgrade sys-block/partimage.Upgrade app-text/gv.Upgrade kde-base/kget.Upgrade app-antivirus/bitdefender-console.Upgrade x11-libs/gtk+.Upgrade sys-apps/pmount.Upgrade dev-perl/perl-tk.Upgrade x11-apps/xinit.Upgrade dev-lang/tk.Upgrade dev-util/sourcenav.Upgrade dev-util/insight.Upgrade net-mail/mlmmj.Upgrade app-arch/ncompress.Upgrade media-libs/libpng.Upgrade net-ftp/lftp.Upgrade app-misc/beanstalkd.Upgrade sys-auth/pam_krb5. | Oct 30, 2017 | Feb 20, 2009 |
| Suse | — | Upgrade libpng12-0-x86Upgrade libpng-devel-32bitUpgrade libpng-develUpgrade libpng12-0Upgrade libpng12-0-32bit | Dec 12, 2013 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub