A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service.

An update of the libpng package has been released.

An update of the syslinux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local     network access to pass a specially crafted PNG file to the pngimage utility, causing an application to     crash, leading to a denial of service. (CVE-2021-4214)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
333963	Photon OS 5.0: Libpng PHSA-2026-5.0-91-0802	Nessus	PhotonOS Local Security Checks	Local	medium
332175	Photon OS 5.0: Syslinux PHSA-2023-5.0-91-0033	Nessus	PhotonOS Local Security Checks	Local	critical
305121	Photon OS 5.0: Libpng PHSA-2026-5.0-0802	Nessus	PhotonOS Local Security Checks	Local	medium
256237	Linux Distros Unpatched Vulnerability : CVE-2021-4214	Nessus	Misc.	Local	medium
204258	Photon OS 5.0: Syslinux PHSA-2023-5.0-0033	Nessus	PhotonOS Local Security Checks	Local	critical
204103	Photon OS 3.0: Syslinux PHSA-2023-3.0-0602	Nessus	PhotonOS Local Security Checks	Local	critical
203638	Photon OS 4.0: Syslinux PHSA-2023-4.0-0415	Nessus	PhotonOS Local Security Checks	Local	critical

Detections

Analytics

CVE-2021-4214

medium

Tenable Plugins

medium

critical

medium

medium

critical

critical

critical