The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5432-2 advisory.

  - libpng before 1.6.32 does not properly check the length of chunks against the user limit. (CVE-2017-12652)

  - An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to     the recommended error handling for png_read_image. (CVE-2018-14048)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5432-1 advisory.

  - libpng before 1.6.32 does not properly check the length of chunks against the user limit. (CVE-2017-12652)

  - An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to     the recommended error handling for png_read_image. (CVE-2018-14048)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

New libpng packages are available for Slackware 14.2 and -current to fix security issues.

An update of the openjdk11 package has been released.

The remote host is affected by the vulnerability described in GLSA-201908-02 (libpng: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libpng. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, by enticing a user to process a specially crafted PNG       file, could cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Published	Updated	Severity
183574	Ubuntu 16.04 ESM : libpng vulnerabilities (USN-5432-2)	Nessus	Ubuntu Local Security Checks	10/20/2023	10/20/2023	critical
161447	Ubuntu 16.04 ESM : libpng vulnerabilities (USN-5432-1)	Nessus	Ubuntu Local Security Checks	5/24/2022	7/10/2023	critical
124140	Slackware 14.2 / current : libpng (SSA:2019-107-01)	Nessus	Slackware Local Security Checks	4/18/2019	12/6/2022	high
136109	Photon OS 1.0: Openjdk11 PHSA-2020-1.0-0290	Nessus	PhotonOS Local Security Checks	4/29/2020	3/14/2024	critical
127560	GLSA-201908-02 : libpng: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	8/12/2019	5/7/2024	high
136100	Photon OS 3.0: Openjdk11 PHSA-2020-3.0-0084	Nessus	PhotonOS Local Security Checks	4/29/2020	3/14/2024	critical

Detections

Analytics

Plugins Search

critical

critical

high

critical

high

critical