vulnerability

Huawei EulerOS: CVE-2015-8540: syslinux security update

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Apr 14, 2016
Added
Nov 11, 2024
Modified
Dec 23, 2024

Description

Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.

Solutions

huawei-euleros-2_0_sp10-upgrade-syslinuxhuawei-euleros-2_0_sp10-upgrade-syslinux-nonlinux
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.