Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-13785

Опубликовано: 09 июл. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.5

Описание

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

РелизСтатусПримечание
artful

DNE

bionic

DNE

devel

DNE

esm-infra-legacy/trusty

not-affected

code not present
esm-infra/xenial

not-affected

code not present
precise/esm

not-affected

code not present
trusty

not-affected

code not present
trusty/esm

not-affected

code not present
upstream

needs-triage

xenial

not-affected

code not present

Показывать по

РелизСтатусПримечание
artful

released

1.6.34-1ubuntu0.17.10.1
bionic

released

1.6.34-1ubuntu0.18.04.1
devel

not-affected

1.6.34-2
esm-apps/xenial

not-affected

esm-infra-legacy/trusty

DNE

esm-infra/bionic

released

1.6.34-1ubuntu0.18.04.1
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

1.6.34-2

Показывать по

EPSS

Процентиль: 86%
0.02919
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
redhat
почти 8 лет назад

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

CVSS3: 6.5
nvd
больше 7 лет назад

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

CVSS3: 6.5
debian
больше 7 лет назад

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_c ...

CVSS3: 6.5
github
больше 3 лет назад

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

suse-cvrf
больше 6 лет назад

Security update for libpng16

EPSS

Процентиль: 86%
0.02919
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3