Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2018-2728

Критический

ALT-PU-2018-2728: package pngcrush update to version 1.8.13-alt1

Источник
errata.altlinux.org
Дата публикации
30.11.2018
Дата обновления
30.11.2018
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades pngcrush to version 1.8.13-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 9 лет назад

Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.

CVSS3: 3.3
redhat
около 9 лет назад

Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.

CVSS3: 9.8
nvd
около 9 лет назад

Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.

CVSS3: 9.8
debian
около 9 лет назад

Double-free vulnerability in the sPLT chunk structure and png.c in png ...

CVSS3: 7.8
ubuntu
около 9 лет назад

Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file.