Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers     to have unspecified impact via unknown vectors. (CVE-2015-7700)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5236-1 advisory.

    Brian Carpenter discovered that pngcrush incorrectly handled specially crafted file. An attacker could     possibly use this issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for pngcrush fixes the following issues :

  - CVE-2015-7700: Fix for a double-free vulnerability in     the sPLT chunk structure and png.c (boo#1056770)

A double-free bug was discovered in pngcrush's handling of the sPLT chunk. A malicious PNG could crash the pngcrush process.
(CVE-2015-7700)

ID	Name	Product	Family	Severity
219085	Linux Distros Unpatched Vulnerability : CVE-2015-7700	Nessus	Misc.	critical
183576	Ubuntu 16.04 ESM : pngcrush vulnerability (USN-5236-1)	Nessus	Ubuntu Local Security Checks	critical
106070	openSUSE Security Update : pngcrush (openSUSE-2018-43)	Nessus	SuSE Local Security Checks	critical
88658	Amazon Linux AMI : pngcrush (ALAS-2016-646)	Nessus	Amazon Linux Local Security Checks	critical

Detections

Analytics

CVE-2015-7700

critical

Tenable Plugins

critical

critical

critical

critical