Test ID:	1.3.6.1.4.1.25623.1.0.117647
Category:	General
Title:	Oracle OpenJDK 'libpng' Vulnerability (CVE-2018-14048)
Summary:	Oracle OpenJDK is prone to a vulnerability in libpng.
Description:	Summary: Oracle OpenJDK is prone to a vulnerability in libpng. Vulnerability Insight: An issue has been found in libpng 1.6.34 as used in Oracle OpenJDK. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image. Affected Software/OS: Oracle OpenJDK versions 8u181 (1.8.0.181), 7u191 (1.7.0.191), 6u201 (1.6.0.201) and prior. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-14048 Bugtraq: 20190417 [slackware-security] libpng (SSA:2019-107-01) (Google Search) https://seclists.org/bugtraq/2019/Apr/30 https://security.gentoo.org/glsa/201908-02 http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html https://github.com/fouzhe/security/tree/master/libpng https://github.com/glennrp/libpng/issues/238
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.