Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.850631
Category:SuSE Local Security Checks
Title:openSUSE: Security Advisory for libpng16 (openSUSE-SU-2015:0161-1)
Summary:The remote host is missing an update for the 'libpng16'; package(s) announced via the referenced advisory.
Description:Summary:
The remote host is missing an update for the 'libpng16'
package(s) announced via the referenced advisory.

Vulnerability Insight:
libpng was updated to fix some security issues:

* CVE-2014-9495 [bnc#912076]: Heap-buffer overflow png_combine_row() with
very wide interlaced images

* CVE-2015-0973 [bnc#912929]: overflow in png_read_IDAT_data

libpng is now also build with -DPNG_SAFE_LIMITS_SUPPORTED.

Affected Software/OS:
libpng16 on openSUSE 13.1

Solution:
Please install the updated package(s).

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2014-9495
http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
BugTraq ID: 71820
http://www.securityfocus.com/bid/71820
http://www.openwall.com/lists/oss-security/2015/01/04/3
http://www.openwall.com/lists/oss-security/2015/01/10/1
http://www.openwall.com/lists/oss-security/2015/01/10/3
http://sourceforge.net/p/png-mng/mailman/message/33173461/
http://sourceforge.net/p/png-mng/mailman/message/33172831/
http://www.securitytracker.com/id/1031444
http://secunia.com/advisories/62725
Common Vulnerability Exposure (CVE) ID: CVE-2015-0973
http://tfpwn.com/files/libpng_heap_overflow_1.6.15.txt
CopyrightCopyright (C) 2015 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.