CVE-2015-8472

HIGH

Description

Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126.

References

http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html

http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174905.html

http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174936.html

http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175073.html

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html

http://rhn.redhat.com/errata/RHSA-2015-2594.html

http://rhn.redhat.com/errata/RHSA-2015-2595.html

http://rhn.redhat.com/errata/RHSA-2015-2596.html

http://rhn.redhat.com/errata/RHSA-2016-0055.html

http://rhn.redhat.com/errata/RHSA-2016-0056.html

http://rhn.redhat.com/errata/RHSA-2016-0057.html

http://sourceforge.net/projects/libpng/files/libpng10/1.0.65/

http://sourceforge.net/projects/libpng/files/libpng12/1.2.55/

http://sourceforge.net/projects/libpng/files/libpng14/1.4.18/

http://sourceforge.net/projects/libpng/files/libpng15/1.5.25/

http://sourceforge.net/projects/libpng/files/libpng16/1.6.20/

http://www.debian.org/security/2016/dsa-3443

http://www.openwall.com/lists/oss-security/2015/12/03/6

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

http://www.securityfocus.com/bid/78624

https://access.redhat.com/errata/RHSA-2016:1430

https://kc.mcafee.com/corporate/index?page=content&id=SB10148

https://support.apple.com/HT206167

Details

Source: MITRE

Published: 2016-01-21

Updated: 2017-11-04

Type: CWE-119

Risk Information

CVSS v2.0

Base Score: 7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 10

Severity: HIGH

CVSS v3.0

Base Score: 7.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Impact Score: 3.4

Exploitability Score: 3.9

Severity: HIGH

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* versions up to 10.11.3 (inclusive)

Configuration 2

OR

cpe:2.3:a:libpng:libpng:1.0.64:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.10:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.11:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.12:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.13:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.14:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.15:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.16:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.17:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.18:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.19:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.20:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.21:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.22:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.23:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.24:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.25:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.26:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.27:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.28:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.29:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.30:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.31:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.32:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.33:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.34:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.35:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.36:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.37:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.38:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.39:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.40:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.41:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.42:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.43:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.44:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.45:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.46:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.47:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.48:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.49:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.50:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.51:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.52:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.53:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.2.54:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.4:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.5:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.6:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.7:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.8:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.9:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.10:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.11:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.12:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.13:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.14:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.15:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.16:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.4.17:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.2:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.3:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.4:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.5:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.6:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.7:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.8:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.9:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.10:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.11:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.12:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.13:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.14:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.15:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.16:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.17:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.18:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.19:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.20:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.21:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.22:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.23:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.5.24:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.0:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.1:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.2:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.3:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.4:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.5:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.6:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.7:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.8:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.9:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.10:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.11:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.12:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.13:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.14:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.15:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.16:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.17:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.18:*:*:*:*:*:*:*

cpe:2.3:a:libpng:libpng:1.6.19:*:*:*:*:*:*:*

Tenable Plugins

View all (57 total)

IDNameProductFamilySeverity
137503EulerOS 2.0 SP2 : libpng (EulerOS-SA-2020-1661)NessusHuawei Local Security Checks
critical
124924EulerOS Virtualization 3.0.1.0 : libpng (EulerOS-SA-2019-1421)NessusHuawei Local Security Checks
high
119974SUSE SLES12 Security Update : java-1_6_0-ibm (SUSE-SU-2016:0428-1) (SLOTH)NessusSuSE Local Security Checks
critical
92678Debian DLA-375-1 : libpng Security UpdateNessusDebian Local Security Checks
high
92400RHEL 5 / 6 : java-1.7.0-ibm and java-1.7.1-ibm (RHSA-2016:1430) (SLOTH)NessusRed Hat Local Security Checks
critical
9327Mac OS X 10.11.x < 10.11.4 Multiple VulnerabilitiesNessus Network MonitorOperating System Detection
critical
91331F5 Networks BIG-IP : Libpng vulnerability (K81903701)NessusF5 Networks Local Security Checks
high
9267VLC Media Player < 2.2.2 Multiple VulnerabilitiesNessus Network MonitorWeb Clients
high
90097Mac OS X 10.9.5 / 10.10.5 Multiple Vulnerabilities (Security Update 2016-002)NessusMacOS X Local Security Checks
critical
90096Mac OS X 10.11.x < 10.11.4 Multiple VulnerabilitiesNessusMacOS X Local Security Checks
critical
89989SUSE SLES10 Security Update : java-1_6_0-ibm (SUSE-SU-2016:0776-1) (SLOTH)NessusSuSE Local Security Checks
critical
89961SUSE SLES11 Security Update : java-1_6_0-ibm (SUSE-SU-2016:0770-1) (SLOTH)NessusSuSE Local Security Checks
critical
89657SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2016:0636-1) (SLOTH)NessusSuSE Local Security Checks
critical
89405Fedora 23 : libpng15-1.5.25-1.fc23 (2015-c80ec85542)NessusFedora Local Security Checks
high
89365Fedora 22 : libpng12-1.2.56-1.fc22 (2015-ac8100927a)NessusFedora Local Security Checks
high
89317Fedora 23 : libpng10-1.0.65-1.fc23 (2015-8c475f7169)NessusFedora Local Security Checks
high
89236Fedora 23 : libpng-1.6.17-3.fc23 (2015-4ad4998d00)NessusFedora Local Security Checks
high
89213Fedora 23 : libpng12-1.2.56-1.fc23 (2015-39499d9af8)NessusFedora Local Security Checks
high
89203Fedora 22 : libpng10-1.0.65-1.fc22 (2015-3461e976cb)NessusFedora Local Security Checks
high
89175Fedora 22 : libpng15-1.5.25-1.fc22 (2015-233750b6ab)NessusFedora Local Security Checks
high
89053AIX Java Advisory : java_jan2016_advisory.asc (January 2016 CPU) (SLOTH)NessusAIX Local Security Checks
critical
88710SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2016:0433-1) (SLOTH)NessusSuSE Local Security Checks
critical
88709SUSE SLES11 Security Update : java-1_6_0-ibm (SUSE-SU-2016:0431-1) (SLOTH)NessusSuSE Local Security Checks
critical
88692SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2016:0390-1) (SLOTH)NessusSuSE Local Security Checks
critical
88580Debian DLA-410-1 : openjdk-6 security update (SLOTH)NessusDebian Local Security Checks
critical
88557RHEL 5 / 6 : java-1.6.0-ibm (RHSA-2016:0101) (SLOTH)NessusRed Hat Local Security Checks
critical
88556RHEL 5 : java-1.7.0-ibm (RHSA-2016:0100) (SLOTH)NessusRed Hat Local Security Checks
critical
88555RHEL 6 / 7 : java-1.7.1-ibm (RHSA-2016:0099) (SLOTH)NessusRed Hat Local Security Checks
critical
88554RHEL 7 : java-1.8.0-ibm (RHSA-2016:0098) (SLOTH)NessusRed Hat Local Security Checks
critical
88541openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-115) (SLOTH)NessusSuSE Local Security Checks
critical
88540openSUSE Security Update : Java7 (openSUSE-2016-110) (SLOTH)NessusSuSE Local Security Checks
critical
88538openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-107) (SLOTH)NessusSuSE Local Security Checks
critical
88537openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2016-106) (SLOTH)NessusSuSE Local Security Checks
critical
88536openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2016-105) (SLOTH)NessusSuSE Local Security Checks
critical
88486SUSE SLED11 Security Update : java-1_7_0-openjdk (SUSE-SU-2016:0269-1) (SLOTH)NessusSuSE Local Security Checks
critical
88485SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2016:0265-1) (SLOTH)NessusSuSE Local Security Checks
critical
88453SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2016:0256-1) (SLOTH)NessusSuSE Local Security Checks
critical
88076RHEL 5 / 6 / 7 : java-1.6.0-sun (RHSA-2016:0057)NessusRed Hat Local Security Checks
critical
88075RHEL 5 / 6 / 7 : java-1.7.0-oracle (RHSA-2016:0056) (SLOTH)NessusRed Hat Local Security Checks
critical
88074RHEL 6 / 7 : java-1.8.0-oracle (RHSA-2016:0055) (SLOTH)NessusRed Hat Local Security Checks
critical
87899Debian DSA-3443-1 : libpng - security updateNessusDebian Local Security Checks
high
87774Ubuntu 12.04 LTS / 14.04 LTS / 15.04 / 15.10 : libpng vulnerabilities (USN-2861-1)NessusUbuntu Local Security Checks
high
87585Scientific Linux Security Update : libpng on SL7.x x86_64 (20151209)NessusScientific Linux Local Security Checks
high
87584Scientific Linux Security Update : libpng12 on SL7.x x86_64 (20151209)NessusScientific Linux Local Security Checks
high
87376Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : libpng (SSA:2015-349-02)NessusSlackware Local Security Checks
high
87341Amazon Linux AMI : libpng (ALAS-2015-615)NessusAmazon Linux Local Security Checks
high
87308Scientific Linux Security Update : libpng on SL6.x i386/x86_64 (20151209)NessusScientific Linux Local Security Checks
high
87307RHEL 7 : libpng (RHSA-2015:2596)NessusRed Hat Local Security Checks
high
87306RHEL 7 : libpng12 (RHSA-2015:2595)NessusRed Hat Local Security Checks
high
87305RHEL 6 : libpng (RHSA-2015:2594)NessusRed Hat Local Security Checks
high
87302Oracle Linux 7 : libpng (ELSA-2015-2596)NessusOracle Linux Local Security Checks
high
87301Oracle Linux 7 : libpng12 (ELSA-2015-2595)NessusOracle Linux Local Security Checks
high
87300Oracle Linux 6 : libpng (ELSA-2015-2594)NessusOracle Linux Local Security Checks
high
87285CentOS 7 : libpng (CESA-2015:2596)NessusCentOS Local Security Checks
high
87284CentOS 7 : libpng12 (CESA-2015:2595)NessusCentOS Local Security Checks
high
87283CentOS 6 : libpng (CESA-2015:2594)NessusCentOS Local Security Checks
high
86876FreeBSD : libpng buffer overflow in png_set_PLTE (1886e195-8b87-11e5-90e7-b499baebfeaf)NessusFreeBSD Local Security Checks
high