CVE-2017-12652

Опубликовано: 10 июл. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

Ссылки

http://www.securityfocus.com/bid/109269
Broken Link
Third Party Advisory
VDB Entry
https://github.com/glennrp/libpng/blob/df7e9dae0c4aac63d55361e35709c864fa1b8363/ANNOUNCE
Release Notes
Third Party Advisory
https://github.com/pnggroup/libpng/commit/347538efbdc21b8df684ebd92d37400b3ce85d55
https://security.netapp.com/advisory/ntap-20220506-0003/
Third Party Advisory
https://support.f5.com/csp/article/K88124225
Third Party Advisory
https://support.f5.com/csp/article/K88124225?utm_source=f5support&utm_medium=RSS
http://www.securityfocus.com/bid/109269
Broken Link
Third Party Advisory
VDB Entry
https://github.com/glennrp/libpng/blob/df7e9dae0c4aac63d55361e35709c864fa1b8363/ANNOUNCE
Release Notes
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220506-0003/
Third Party Advisory
https://support.f5.com/csp/article/K88124225
Third Party Advisory
https://support.f5.com/csp/article/K88124225?utm_source=f5support&amp%3Butm_medium=RSS

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*

Версия до 1.6.32 (исключая)

Конфигурация 2

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*

EPSS

Процентиль: 65%

0.005

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2017-12652

CVSS3: 9.8

ubuntu

почти 6 лет назад

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

CVE-2017-12652

CVSS3: 3.7

redhat

почти 6 лет назад

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

CVE-2017-12652

CVSS3: 9.8

msrc

4 месяца назад

Описание отсутствует

CVE-2017-12652

CVSS3: 9.8

debian

почти 6 лет назад

libpng before 1.6.32 does not properly check the length of chunks agai ...

SUSE-SU-2023:3799-1

suse-cvrf

почти 2 года назад

Security update for libpng15

EPSS

Процентиль: 65%

0.005

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-20