High · published November 13, 2015
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.
| Product | Versions | Fixed in |
|---|---|---|
| libpng/libpng | < 1.0.64 | 1.0.64 |
| libpng/libpng | ≥ 1.1.1, < 1.2.54 | 1.2.54 |
| libpng/libpng | ≥ 1.3.0, < 1.4.17 | 1.4.17 |
| libpng/libpng | ≥ 1.5.0, < 1.5.24 | 1.5.24 |
| libpng/libpng | ≥ 1.6.0, < 1.6.19 | 1.6.19 |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| opensuse/leap | all versions | — |
| opensuse/opensuse | all versions | — |
| opensuse/opensuse | all versions | — |
| suse/linux_enterprise_desktop | all versions | — |
| suse/linux_enterprise_desktop | all versions | — |
| suse/linux_enterprise_desktop | all versions | — |
| suse/linux_enterprise_desktop | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| suse/linux_enterprise_server | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| redhat/satellite | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_tus | all versions | — |
| redhat/enterprise_linux_server_tus | all versions | — |
| redhat/enterprise_linux_server_tus | all versions | — |
| redhat/enterprise_linux_server_tus | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |
| redhat/satellite | all versions | — |
| oracle/jdk | all versions | — |
| oracle/jdk | all versions | — |
| oracle/jdk | all versions | — |
| oracle/jdk | all versions | — |
| oracle/jre | all versions | — |
| oracle/jre | all versions | — |
| oracle/jre | all versions | — |
| oracle/jre | all versions | — |
| oracle/linux | all versions | — |
| oracle/linux | all versions | — |
| oracle/solaris | all versions | — |
| apple/mac_os_x | < 10.11.4 | 10.11.4 |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |