Scientific Linux Security Update : libpng on SL7.x x86_64 (20151209)

high Nessus Plugin ID 87585

Synopsis

The remote Scientific Linux host is missing one or more security updates.

Description

It was discovered that the png_get_PLTE() and png_set_PLTE() functions of libpng did not correctly calculate the maximum palette sizes for bit depths of less than 8. In case an application tried to use these functions in combination with properly calculated palette sizes, this could lead to a buffer overflow or out-of-bounds reads. An attacker could exploit this to cause a crash or potentially execute arbitrary code by tricking an unsuspecting user into processing a specially crafted PNG image. However, the exact impact is dependent on the application using the library. (CVE-2015-8126, CVE-2015-8472)

Solution

Update the affected packages.

See Also

http://www.nessus.org/u?bc53c4e3

Plugin Details

Severity: High

ID: 87585

File Name: sl_20151209_libpng_on_SL7_x.nasl

Version: 2.7

Type: local

Agent: unix

Published: 12/22/2015

Updated: 1/14/2021

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.0

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: High

Base Score: 7.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Vulnerability Information

CPE: p-cpe:/a:fermilab:scientific_linux:libpng, p-cpe:/a:fermilab:scientific_linux:libpng-debuginfo, p-cpe:/a:fermilab:scientific_linux:libpng-devel, p-cpe:/a:fermilab:scientific_linux:libpng-static, x-cpe:/o:fermilab:scientific_linux

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 12/9/2015

Vulnerability Publication Date: 11/13/2015

Reference Information

CVE: CVE-2015-8126, CVE-2015-8472