NetSight
IP …
medium6.5

CVE-2018-13785

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by…

Impact

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

Affected products

VendorProductAffected versions
LibpngLibpng
Version 1.6.34
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10, 18.04
OracleJdk
Versions 1.6.0, 1.7.0, 1.8.0, 11.0.0
OracleJre
Versions 1.6.0, 1.7.0, 1.8.0, 11.0.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0

Weakness classification

CWE-190CWE-369

References