Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted PNG file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade x11-apps/xinit.Upgrade app-arch/ncompress.Upgrade sys-apps/pmount.Upgrade sys-auth/pam_krb5.Upgrade net-mail/mlmmj.Upgrade media-libs/libpng.Upgrade net-ftp/lftp.Upgrade dev-lang/tk.Upgrade dev-perl/perl-tk.Upgrade app-misc/beanstalkd.Upgrade dev-util/sourcenav.Upgrade x11-libs/gtk+.Upgrade dev-util/insight.Upgrade kde-base/kget.Upgrade dev-libs/liblzw.Upgrade media-gfx/splashutils.Upgrade media-tv/dvbstreamer.Upgrade kde-base/kdm.Upgrade app-text/gv.Upgrade sys-apps/acl.Upgrade net-misc/iputils.Upgrade app-antivirus/bitdefender-console.Upgrade www-client/uzbl.Upgrade app-text/dvipng.Upgrade sys-block/partimage.Upgrade app-arch/gzip.Upgrade x11-misc/slim.Upgrade sys-devel/m4. | Oct 30, 2017 | Feb 20, 2009 |
| Suse | — | Upgrade libpng-devel-32bitUpgrade libpng-develUpgrade libpng12-0-32bitUpgrade libpng12-0Upgrade libpng12-0-x86 | Dec 12, 2013 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub