The libpng12 package was updated to fix the following security issues :

  - CVE-2015-8126: Fixed a buffer overflow vulnerabilities     in png_get_PLTE/png_set_PLTE functions (bsc#954980).

  - CVE-2015-7981: Fixed an out-of-bound read (bsc#952051).

Updated libpng packages that fix three security issues are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The libpng packages contain a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files.

It was discovered that the png_get_PLTE() and png_set_PLTE() functions of libpng did not correctly calculate the maximum palette sizes for bit depths of less than 8. In case an application tried to use these functions in combination with properly calculated palette sizes, this could lead to a buffer overflow or out-of-bounds reads. An attacker could exploit this to cause a crash or potentially execute arbitrary code by tricking an unsuspecting user into processing a specially crafted PNG image. However, the exact impact is dependent on the application using the library. (CVE-2015-8126, CVE-2015-8472)

An array-indexing error was discovered in the png_convert_to_rfc1123() function of libpng. An attacker could possibly use this flaw to cause an out-of-bounds read by tricking an unsuspecting user into processing a specially crafted PNG image. (CVE-2015-7981)

All libpng users are advised to upgrade to these updated packages, which contain backported patches to correct these issues.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2596 advisory.

    - Security fix for CVE-2015-8126
    - Security fix for CVE-2015-8126

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated libpng12 packages that fix three security issues are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The libpng12 packages contain a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files.

It was discovered that the png_get_PLTE() and png_set_PLTE() functions of libpng did not correctly calculate the maximum palette sizes for bit depths of less than 8. In case an application tried to use these functions in combination with properly calculated palette sizes, this could lead to a buffer overflow or out-of-bounds reads. An attacker could exploit this to cause a crash or potentially execute arbitrary code by tricking an unsuspecting user into processing a specially crafted PNG image. However, the exact impact is dependent on the application using the library. (CVE-2015-8126, CVE-2015-8472)

An array-indexing error was discovered in the png_convert_to_rfc1123() function of libpng. An attacker could possibly use this flaw to cause an out-of-bounds read by tricking an unsuspecting user into processing a specially crafted PNG image. (CVE-2015-7981)

All libpng12 users are advised to upgrade to these updated packages, which contain backported patches to correct these issues.

This update fixes the following security issue :

  - CVE-2015-8126 Buffer overflow vulnerabilities in     png_get_PLTE/png_set_PLTE functions (bsc#954980)

This update fixes the following security issue :

  - CVE-2015-8126 Possible buffer overflow vulnerabilities     in png_get_PLTE and png_set_PLTE functions could cause a     denial of service (application crash) or possibly have     an unspecified impact [bsc#954980]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- security update: This update fixes the following securit     issue :

  - CVE-2015-8126 Multiple buffer overflows in the     png_set_PLTE and png_get_PLTE functions allow remote     attackers to cause a denial of service (application     crash) or possibly have unspecified other impact     [bsc#954980]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes the following security issue

  - CVE-2015-8126 Multiple buffer overflows in the     png_set_PLTE and png_get_PLTE functions allow remote     attackers to cause a denial of service (application     crash) or possibly have unspecified other impact     [bsc#954980] This update was imported from the     SUSE:SLE-12:Update update project.

Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126. (CVE-2015-8472)

Impact

This vulnerability may allow unauthorized disclosure of information, unauthorized modification, or disruption of service.

Important : A low severity rating applies when the attack is considered to be local only. A medium security rating applies when the BIG-IP APM module is enabled and configured with a Citrix VDI back end.

libpng 1.6.19 release, fixing CVE-2015-8126

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Chromium was updated to 49.0.2623.75 to fix the following security issues: (boo#969333)

  - CVE-2016-1630: Same-origin bypass in Blink

  - CVE-2016-1631: Same-origin bypass in Pepper Plugin

  - CVE-2016-1632: Bad cast in Extensions

  - CVE-2016-1633: Use-after-free in Blink

  - CVE-2016-1634: Use-after-free in Blink

  - CVE-2016-1635: Use-after-free in Blink

  - CVE-2016-1636: SRI Validation Bypass

  - CVE-2015-8126: Out-of-bounds access in libpng

  - CVE-2016-1637: Information Leak in Skia

  - CVE-2016-1638: WebAPI Bypass

  - CVE-2016-1639: Use-after-free in WebRTC

  - CVE-2016-1640: Origin confusion in Extensions UI

  - CVE-2016-1641: Use-after-free in Favicon

  - CVE-2016-1642: Various fixes from internal audits,     fuzzing and other initiatives

  - Multiple vulnerabilities in V8 fixed at the tip of the     4.9 branch (currently 4.9.385.26)

ID	Name	Product	Family	Published	Updated	Severity
87087	openSUSE Security Update : libpng12 (openSUSE-2015-826)	Nessus	SuSE Local Security Checks	11/30/2015	1/19/2021	high
87283	CentOS 6 : libpng (CESA-2015:2594)	Nessus	CentOS Local Security Checks	12/10/2015	1/4/2021	high
87302	Oracle Linux 7 : libpng (ELSA-2015-2596)	Nessus	Oracle Linux Local Security Checks	12/10/2015	10/22/2024	high
87306	RHEL 7 : libpng12 (RHSA-2015:2595)	Nessus	Red Hat Local Security Checks	12/10/2015	10/24/2019	high
87445	openSUSE Security Update : libpng12 (openSUSE-2015-902)	Nessus	SuSE Local Security Checks	12/17/2015	1/19/2021	high
87864	SUSE SLED12 / SLES12 Security Update : libpng15 (SUSE-SU-2016:0041-1)	Nessus	SuSE Local Security Checks	1/12/2016	1/6/2021	high
87867	SUSE SLED11 / SLES11 Security Update : libpng12-0 (SUSE-SU-2016:0061-1)	Nessus	SuSE Local Security Checks	1/12/2016	1/6/2021	high
88120	openSUSE Security Update : libpng12 (openSUSE-2016-30)	Nessus	SuSE Local Security Checks	1/25/2016	1/19/2021	high
91331	F5 Networks BIG-IP : Libpng vulnerability (K81903701)	Nessus	F5 Networks Local Security Checks	5/26/2016	5/9/2019	high
89152	Fedora 23 : mingw-libpng-1.6.19-1.fc23 (2015-13668fff74)	Nessus	Fedora Local Security Checks	3/4/2016	1/11/2021	high
89912	openSUSE Security Update : Chromium (openSUSE-2016-330)	Nessus	SuSE Local Security Checks	3/14/2016	1/19/2021	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

critical