Test ID:	1.3.6.1.4.1.25623.1.0.704435
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-4435-1)
Summary:	The remote host is missing an update for the Debian 'libpng1.6' package(s) announced via the DSA-4435-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'libpng1.6' package(s) announced via the DSA-4435-1 advisory. Vulnerability Insight: A use-after-free vulnerability was discovered in the png_image_free() function in the libpng PNG library, which could lead to denial of service or potentially the execution of arbitrary code if a malformed image is processed. For the stable distribution (stretch), this problem has been fixed in version 1.6.28-1+deb9u1. We recommend that you upgrade your libpng1.6 packages. For the detailed security status of libpng1.6 please refer to its security tracker page at: [link moved to references] Affected Software/OS: 'libpng1.6' package(s) on Debian 9. Solution: Please install the updated package(s). CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-7317 BugTraq ID: 108098 http://www.securityfocus.com/bid/108098 Bugtraq: 20190417 [slackware-security] libpng (SSA:2019-107-01) (Google Search) https://seclists.org/bugtraq/2019/Apr/30 Bugtraq: 20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update (Google Search) https://seclists.org/bugtraq/2019/Apr/36 Bugtraq: 20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01) (Google Search) https://seclists.org/bugtraq/2019/May/56 Bugtraq: 20190523 [SECURITY] [DSA 4448-1] firefox-esr security update (Google Search) https://seclists.org/bugtraq/2019/May/59 Bugtraq: 20190527 [SECURITY] [DSA 4451-1] thunderbird security update (Google Search) https://seclists.org/bugtraq/2019/May/67 https://security.netapp.com/advisory/ntap-20190719-0005/ https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us Debian Security Information: DSA-4435 (Google Search) https://www.debian.org/security/2019/dsa-4435 Debian Security Information: DSA-4448 (Google Search) https://www.debian.org/security/2019/dsa-4448 Debian Security Information: DSA-4451 (Google Search) https://www.debian.org/security/2019/dsa-4451 https://security.gentoo.org/glsa/201908-02 http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803 https://github.com/glennrp/libpng/issues/275 https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuoct2021.html https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html RedHat Security Advisories: RHSA-2019:1265 https://access.redhat.com/errata/RHSA-2019:1265 RedHat Security Advisories: RHSA-2019:1267 https://access.redhat.com/errata/RHSA-2019:1267 RedHat Security Advisories: RHSA-2019:1269 https://access.redhat.com/errata/RHSA-2019:1269 RedHat Security Advisories: RHSA-2019:1308 https://access.redhat.com/errata/RHSA-2019:1308 RedHat Security Advisories: RHSA-2019:1309 https://access.redhat.com/errata/RHSA-2019:1309 RedHat Security Advisories: RHSA-2019:1310 https://access.redhat.com/errata/RHSA-2019:1310 RedHat Security Advisories: RHSA-2019:2494 https://access.redhat.com/errata/RHSA-2019:2494 RedHat Security Advisories: RHSA-2019:2495 https://access.redhat.com/errata/RHSA-2019:2495 RedHat Security Advisories: RHSA-2019:2585 https://access.redhat.com/errata/RHSA-2019:2585 RedHat Security Advisories: RHSA-2019:2590 https://access.redhat.com/errata/RHSA-2019:2590 RedHat Security Advisories: RHSA-2019:2592 https://access.redhat.com/errata/RHSA-2019:2592 RedHat Security Advisories: RHSA-2019:2737 https://access.redhat.com/errata/RHSA-2019:2737 SuSE Security Announcement: openSUSE-SU-2019:1484 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html SuSE Security Announcement: openSUSE-SU-2019:1534 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html SuSE Security Announcement: openSUSE-SU-2019:1664 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html SuSE Security Announcement: openSUSE-SU-2019:1912 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html SuSE Security Announcement: openSUSE-SU-2019:1916 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html https://usn.ubuntu.com/3962-1/ https://usn.ubuntu.com/3991-1/ https://usn.ubuntu.com/3997-1/ https://usn.ubuntu.com/4080-1/ https://usn.ubuntu.com/4083-1/
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.