Mandrake Linux Security Advisory : pxelinux (MDKSA-2006:211)
High Nessus Plugin ID 24596
SynopsisThe remote Mandrake Linux host is missing one or more security updates.
DescriptionPXELINUX is a PXE bootloader. It is built with a private copy of libpng, and as such could be susceptible to some of the same vulnerabilities :
Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to 'chunk error processing,' possibly involving the 'chunk_name'. (CVE-2006-3334)
It is questionable whether this issue is actually exploitable, but the patch to correct the issue has been included in versions < 1.2.12.
Tavis Ormandy, of the Gentoo Linux Security Auditing Team, discovered a typo in png_set_sPLT() that may cause an application using libpng to read out of bounds, resulting in a crash. (CVE-2006-5793)
Packages have been patched to correct these issues.
SolutionUpdate the affected pxelinux and / or pxelinux-devel packages.