NetSight
IP …
high7.5

CVE-2015-8126

Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before…

Impact

Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.

Affected products

VendorProductAffected versions
LibpngLibpng
before 1.0.64
from 1.1.1 before 1.2.54
from 1.3.0 before 1.4.17
from 1.5.0 before 1.5.24
from 1.6.0 before 1.6.19
FedoraprojectFedora
Versions 21, 22, 23
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 13.1, 13.2
SuseLinux Enterprise Desktop
Versions 11, 12
SuseLinux Enterprise Server
Version 12
DebianDebian Linux
Versions 7.0, 8.0, 9.0
RedhatSatellite
Versions 5.7, 5.6
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Eus
Versions 6.7, 7.2, 7.3, 7.4, 7.5, 7.6
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.2, 7.3, 7.4, 7.6, 7.7

Weakness classification

CWE-120

References