The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Partial
- Fix status
- Will not fix Red Hat: no fix planned
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.
Summary
The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large avail_in field value in a PNG image.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 149
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:* | 12.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | 14.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:* | 15.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:* | 15.10 | Vulnerable | Canonical |
| cpe:2.3:a:libpng:libpng:1.4.0:*:*:*:*:*:*:* | 1.4.0 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.1:*:*:*:*:*:*:* | 1.4.1 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.2:*:*:*:*:*:*:* | 1.4.2 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.3:*:*:*:*:*:*:* | 1.4.3 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.4:*:*:*:*:*:*:* | 1.4.4 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.5:*:*:*:*:*:*:* | 1.4.5 | Vulnerable | pnggroup |
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:* Versions 12.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:* Versions 15.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:* Versions 15.10 Vulnerable ·Canonical
- cpe:2.3:a:libpng:libpng:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.4:*:*:*:*:*:*:* Versions 1.4.4 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·pnggroup
Show 139 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:libpng:libpng:1.4.6:*:*:*:*:*:*:* | 1.4.6 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.7:*:*:*:*:*:*:* | 1.4.7 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.8:*:*:*:*:*:*:* | 1.4.8 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.9:*:*:*:*:*:*:* | 1.4.9 | Vulnerable | pnggroup |
| cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* | 11.4 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:* | 12.1 | Vulnerable | openSUSE |
| cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:* | 1.2.0 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:* | 1.2.1 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:* | 1.2.2 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:* | 1.2.3 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.4:*:*:*:*:*:*:* | 1.2.4 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.5:*:*:*:*:*:*:* | 1.2.5 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.6:*:*:*:*:*:*:* | 1.2.6 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.7:*:*:*:*:*:*:* | 1.2.7 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.8:*:*:*:*:*:*:* | 1.2.8 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.9:*:*:*:*:*:*:* | 1.2.9 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.10:*:*:*:*:*:*:* | 1.2.10 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.11:*:*:*:*:*:*:* | 1.2.11 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.12:*:*:*:*:*:*:* | 1.2.12 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.13:*:*:*:*:*:*:* | 1.2.13 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.14:*:*:*:*:*:*:* | 1.2.14 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.15:*:*:*:*:*:*:* | 1.2.15 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.16:*:*:*:*:*:*:* | 1.2.16 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.17:*:*:*:*:*:*:* | 1.2.17 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.18:*:*:*:*:*:*:* | 1.2.18 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.19:*:*:*:*:*:*:* | 1.2.19 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.20:*:*:*:*:*:*:* | 1.2.20 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.21:*:*:*:*:*:*:* | 1.2.21 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.22:*:*:*:*:*:*:* | 1.2.22 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.23:*:*:*:*:*:*:* | 1.2.23 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.24:*:*:*:*:*:*:* | 1.2.24 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.25:*:*:*:*:*:*:* | 1.2.25 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.26:*:*:*:*:*:*:* | 1.2.26 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.27:*:*:*:*:*:*:* | 1.2.27 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.28:*:*:*:*:*:*:* | 1.2.28 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.29:*:*:*:*:*:*:* | 1.2.29 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.30:*:*:*:*:*:*:* | 1.2.30 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.31:*:*:*:*:*:*:* | 1.2.31 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.32:*:*:*:*:*:*:* | 1.2.32 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.33:*:*:*:*:*:*:* | 1.2.33 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.34:*:*:*:*:*:*:* | 1.2.34 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.35:*:*:*:*:*:*:* | 1.2.35 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.36:*:*:*:*:*:*:* | 1.2.36 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.37:*:*:*:*:*:*:* | 1.2.37 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.38:*:*:*:*:*:*:* | 1.2.38 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.39:*:*:*:*:*:*:* | 1.2.39 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.40:*:*:*:*:*:*:* | 1.2.40 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.41:*:*:*:*:*:*:* | 1.2.41 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.42:*:*:*:*:*:*:* | 1.2.42 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.43:*:*:*:*:*:*:* | 1.2.43 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.43:devel:*:*:*:*:*:* | 1.2.43 devel | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.44:*:*:*:*:*:*:* | 1.2.44 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.45:*:*:*:*:*:*:* | 1.2.45 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.45:devel:*:*:*:*:*:* | 1.2.45 devel | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.46:*:*:*:*:*:*:* | 1.2.46 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.46:devel:*:*:*:*:*:* | 1.2.46 devel | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.47:*:*:*:*:*:*:* | 1.2.47 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.47:beta:*:*:*:*:*:* | 1.2.47 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.48:betas:*:*:*:*:*:* | 1.2.48 betas | Vulnerable | pnggroup |
| cpe:2.3:a:redhat:libpng:1.2.2-16:*:*:*:*:*:*:* | 1.2.2-16 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:libpng:1.2.2-20:*:*:*:*:*:*:* | 1.2.2-20 | Vulnerable | Red Hat |
| cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Debian |
| cpe:2.3:a:libpng:libpng:1.5.0:beta:*:*:*:*:*:* | 1.5.0 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.1:*:*:*:*:*:*:* | 1.5.1 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.1:beta:*:*:*:*:*:* | 1.5.1 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.2:*:*:*:*:*:*:* | 1.5.2 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.2:beta:*:*:*:*:*:* | 1.5.2 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.3:beta:*:*:*:*:*:* | 1.5.3 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.4:*:*:*:*:*:*:* | 1.5.4 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.4:beta:*:*:*:*:*:* | 1.5.4 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.5:*:*:*:*:*:*:* | 1.5.5 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.5:beta:*:*:*:*:*:* | 1.5.5 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.6:*:*:*:*:*:*:* | 1.5.6 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.6:beta:*:*:*:*:*:* | 1.5.6 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.7:*:*:*:*:*:*:* | 1.5.7 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.7:beta:*:*:*:*:*:* | 1.5.7 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.8:*:*:*:*:*:*:* | 1.5.8 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.8:beta:*:*:*:*:*:* | 1.5.8 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.9:*:*:*:*:*:*:* | 1.5.9 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.9:beta:*:*:*:*:*:* | 1.5.9 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.10:beta:*:*:*:*:*:* | 1.5.10 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.0:*:*:*:*:*:*:* | 1.0.0 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.1:*:*:*:*:*:*:* | 1.0.1 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.2:*:*:*:*:*:*:* | 1.0.2 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.3:*:*:*:*:*:*:* | 1.0.3 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.5:*:*:*:*:*:*:* | 1.0.5 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.6:*:*:*:*:*:*:* | 1.0.6 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.7:*:*:*:*:*:*:* | 1.0.7 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.8:*:*:*:*:*:*:* | 1.0.8 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.9:*:*:*:*:*:*:* | 1.0.9 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.10:*:*:*:*:*:*:* | 1.0.10 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.11:*:*:*:*:*:*:* | 1.0.11 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.12:*:*:*:*:*:*:* | 1.0.12 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.13:*:*:*:*:*:*:* | 1.0.13 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.14:*:*:*:*:*:*:* | 1.0.14 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.15:*:*:*:*:*:*:* | 1.0.15 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.16:*:*:*:*:*:*:* | 1.0.16 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.17:*:*:*:*:*:*:* | 1.0.17 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.18:*:*:*:*:*:*:* | 1.0.18 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.19:*:*:*:*:*:*:* | 1.0.19 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.20:*:*:*:*:*:*:* | 1.0.20 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.21:*:*:*:*:*:*:* | 1.0.21 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.22:*:*:*:*:*:*:* | 1.0.22 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.23:*:*:*:*:*:*:* | 1.0.23 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.24:*:*:*:*:*:*:* | 1.0.24 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.25:*:*:*:*:*:*:* | 1.0.25 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.26:*:*:*:*:*:*:* | 1.0.26 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.27:*:*:*:*:*:*:* | 1.0.27 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.28:*:*:*:*:*:*:* | 1.0.28 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.29:*:*:*:*:*:*:* | 1.0.29 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.30:*:*:*:*:*:*:* | 1.0.30 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.31:*:*:*:*:*:*:* | 1.0.31 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.32:*:*:*:*:*:*:* | 1.0.32 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.33:*:*:*:*:*:*:* | 1.0.33 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.34:*:*:*:*:*:*:* | 1.0.34 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.35:*:*:*:*:*:*:* | 1.0.35 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.37:*:*:*:*:*:*:* | 1.0.37 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.38:*:*:*:*:*:*:* | 1.0.38 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.39:*:*:*:*:*:*:* | 1.0.39 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.40:*:*:*:*:*:*:* | 1.0.40 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.41:*:*:*:*:*:*:* | 1.0.41 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.42:*:*:*:*:*:*:* | 1.0.42 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.43:*:*:*:*:*:*:* | 1.0.43 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.44:*:*:*:*:*:*:* | 1.0.44 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.45:*:*:*:*:*:*:* | 1.0.45 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.46:*:*:*:*:*:*:* | 1.0.46 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.47:*:*:*:*:*:*:* | 1.0.47 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.48:*:*:*:*:*:*:* | 1.0.48 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.50:*:*:*:*:*:*:* | 1.0.50 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.51:*:*:*:*:*:*:* | 1.0.51 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.52:*:*:*:*:*:*:* | 1.0.52 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.53:*:*:*:*:*:*:* | 1.0.53 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.54:*:*:*:*:*:*:* | 1.0.54 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.55:*:*:*:*:*:*:* | 1.0.55 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.55:rc01:*:*:*:*:*:* | 1.0.55 rc01 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.56:*:*:*:*:*:*:* | 1.0.56 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.56:devel:*:*:*:*:*:* | 1.0.56 devel | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.57:*:*:*:*:*:*:* | 1.0.57 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.57:rc01:*:*:*:*:*:* | 1.0.57 rc01 | Vulnerable | pnggroup |
- cpe:2.3:a:libpng:libpng:1.4.6:*:*:*:*:*:*:* Versions 1.4.6 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.7:*:*:*:*:*:*:* Versions 1.4.7 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.8:*:*:*:*:*:*:* Versions 1.4.8 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.9:*:*:*:*:*:*:* Versions 1.4.9 Vulnerable ·pnggroup
- cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* Versions 11.4 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:* Versions 12.1 Vulnerable ·openSUSE
- cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.5:*:*:*:*:*:*:* Versions 1.2.5 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.6:*:*:*:*:*:*:* Versions 1.2.6 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.7:*:*:*:*:*:*:* Versions 1.2.7 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.8:*:*:*:*:*:*:* Versions 1.2.8 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.9:*:*:*:*:*:*:* Versions 1.2.9 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.10:*:*:*:*:*:*:* Versions 1.2.10 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.11:*:*:*:*:*:*:* Versions 1.2.11 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.12:*:*:*:*:*:*:* Versions 1.2.12 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.13:*:*:*:*:*:*:* Versions 1.2.13 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.14:*:*:*:*:*:*:* Versions 1.2.14 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.15:*:*:*:*:*:*:* Versions 1.2.15 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.16:*:*:*:*:*:*:* Versions 1.2.16 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.17:*:*:*:*:*:*:* Versions 1.2.17 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.18:*:*:*:*:*:*:* Versions 1.2.18 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.19:*:*:*:*:*:*:* Versions 1.2.19 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.20:*:*:*:*:*:*:* Versions 1.2.20 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.21:*:*:*:*:*:*:* Versions 1.2.21 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.22:*:*:*:*:*:*:* Versions 1.2.22 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.23:*:*:*:*:*:*:* Versions 1.2.23 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.24:*:*:*:*:*:*:* Versions 1.2.24 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.25:*:*:*:*:*:*:* Versions 1.2.25 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.26:*:*:*:*:*:*:* Versions 1.2.26 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.27:*:*:*:*:*:*:* Versions 1.2.27 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.28:*:*:*:*:*:*:* Versions 1.2.28 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.29:*:*:*:*:*:*:* Versions 1.2.29 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.30:*:*:*:*:*:*:* Versions 1.2.30 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.31:*:*:*:*:*:*:* Versions 1.2.31 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.32:*:*:*:*:*:*:* Versions 1.2.32 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.33:*:*:*:*:*:*:* Versions 1.2.33 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.34:*:*:*:*:*:*:* Versions 1.2.34 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.35:*:*:*:*:*:*:* Versions 1.2.35 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.36:*:*:*:*:*:*:* Versions 1.2.36 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.37:*:*:*:*:*:*:* Versions 1.2.37 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.38:*:*:*:*:*:*:* Versions 1.2.38 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.39:*:*:*:*:*:*:* Versions 1.2.39 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.40:*:*:*:*:*:*:* Versions 1.2.40 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.41:*:*:*:*:*:*:* Versions 1.2.41 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.42:*:*:*:*:*:*:* Versions 1.2.42 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.43:*:*:*:*:*:*:* Versions 1.2.43 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.43:devel:*:*:*:*:*:* Versions 1.2.43 devel Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.44:*:*:*:*:*:*:* Versions 1.2.44 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.45:*:*:*:*:*:*:* Versions 1.2.45 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.45:devel:*:*:*:*:*:* Versions 1.2.45 devel Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.46:*:*:*:*:*:*:* Versions 1.2.46 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.46:devel:*:*:*:*:*:* Versions 1.2.46 devel Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.47:*:*:*:*:*:*:* Versions 1.2.47 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.47:beta:*:*:*:*:*:* Versions 1.2.47 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.48:betas:*:*:*:*:*:* Versions 1.2.48 betas Vulnerable ·pnggroup
- cpe:2.3:a:redhat:libpng:1.2.2-16:*:*:*:*:*:*:* Versions 1.2.2-16 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:libpng:1.2.2-20:*:*:*:*:*:*:* Versions 1.2.2-20 Vulnerable ·Red Hat
- cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Debian
- cpe:2.3:a:libpng:libpng:1.5.0:beta:*:*:*:*:*:* Versions 1.5.0 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.1:beta:*:*:*:*:*:* Versions 1.5.1 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.2:*:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.2:beta:*:*:*:*:*:* Versions 1.5.2 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.3:beta:*:*:*:*:*:* Versions 1.5.3 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.4:*:*:*:*:*:*:* Versions 1.5.4 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.4:beta:*:*:*:*:*:* Versions 1.5.4 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.5:*:*:*:*:*:*:* Versions 1.5.5 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.5:beta:*:*:*:*:*:* Versions 1.5.5 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.6:*:*:*:*:*:*:* Versions 1.5.6 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.6:beta:*:*:*:*:*:* Versions 1.5.6 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.7:*:*:*:*:*:*:* Versions 1.5.7 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.7:beta:*:*:*:*:*:* Versions 1.5.7 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.8:*:*:*:*:*:*:* Versions 1.5.8 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.8:beta:*:*:*:*:*:* Versions 1.5.8 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.9:*:*:*:*:*:*:* Versions 1.5.9 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.9:beta:*:*:*:*:*:* Versions 1.5.9 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.10:beta:*:*:*:*:*:* Versions 1.5.10 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.9:*:*:*:*:*:*:* Versions 1.0.9 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.10:*:*:*:*:*:*:* Versions 1.0.10 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.11:*:*:*:*:*:*:* Versions 1.0.11 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.12:*:*:*:*:*:*:* Versions 1.0.12 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.13:*:*:*:*:*:*:* Versions 1.0.13 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.14:*:*:*:*:*:*:* Versions 1.0.14 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.15:*:*:*:*:*:*:* Versions 1.0.15 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.16:*:*:*:*:*:*:* Versions 1.0.16 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.17:*:*:*:*:*:*:* Versions 1.0.17 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.18:*:*:*:*:*:*:* Versions 1.0.18 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.19:*:*:*:*:*:*:* Versions 1.0.19 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.20:*:*:*:*:*:*:* Versions 1.0.20 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.21:*:*:*:*:*:*:* Versions 1.0.21 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.22:*:*:*:*:*:*:* Versions 1.0.22 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.23:*:*:*:*:*:*:* Versions 1.0.23 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.24:*:*:*:*:*:*:* Versions 1.0.24 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.25:*:*:*:*:*:*:* Versions 1.0.25 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.26:*:*:*:*:*:*:* Versions 1.0.26 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.27:*:*:*:*:*:*:* Versions 1.0.27 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.28:*:*:*:*:*:*:* Versions 1.0.28 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.29:*:*:*:*:*:*:* Versions 1.0.29 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.30:*:*:*:*:*:*:* Versions 1.0.30 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.31:*:*:*:*:*:*:* Versions 1.0.31 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.32:*:*:*:*:*:*:* Versions 1.0.32 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.33:*:*:*:*:*:*:* Versions 1.0.33 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.34:*:*:*:*:*:*:* Versions 1.0.34 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.35:*:*:*:*:*:*:* Versions 1.0.35 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.37:*:*:*:*:*:*:* Versions 1.0.37 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.38:*:*:*:*:*:*:* Versions 1.0.38 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.39:*:*:*:*:*:*:* Versions 1.0.39 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.40:*:*:*:*:*:*:* Versions 1.0.40 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.41:*:*:*:*:*:*:* Versions 1.0.41 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.42:*:*:*:*:*:*:* Versions 1.0.42 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.43:*:*:*:*:*:*:* Versions 1.0.43 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.44:*:*:*:*:*:*:* Versions 1.0.44 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.45:*:*:*:*:*:*:* Versions 1.0.45 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.46:*:*:*:*:*:*:* Versions 1.0.46 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.47:*:*:*:*:*:*:* Versions 1.0.47 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.48:*:*:*:*:*:*:* Versions 1.0.48 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.50:*:*:*:*:*:*:* Versions 1.0.50 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.51:*:*:*:*:*:*:* Versions 1.0.51 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.52:*:*:*:*:*:*:* Versions 1.0.52 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.53:*:*:*:*:*:*:* Versions 1.0.53 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.54:*:*:*:*:*:*:* Versions 1.0.54 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.55:*:*:*:*:*:*:* Versions 1.0.55 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.55:rc01:*:*:*:*:*:* Versions 1.0.55 rc01 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.56:*:*:*:*:*:*:* Versions 1.0.56 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.56:devel:*:*:*:*:*:* Versions 1.0.56 devel Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.57:*:*:*:*:*:*:* Versions 1.0.57 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.57:rc01:*:*:*:*:*:* Versions 1.0.57 rc01 Vulnerable ·pnggroup
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 5 | Affected | No fix planned: Will not fix |
Not affected: 1 product
- Red Hat Enterprise Linux 6
Timeline
- 2026-10-02 Threatist record created from CVE-2012-3425
- 2026-10-03 Alias added: GHSA-2q8q-w58c-r6vg
References
Other 6
- [oss-security] 20120724 CVE Request: libpng: Out-of heap-based buffer read by inflating certain PNG images
- http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=blob%3Bf=CHANGES%3Bh=73e2ffd6a1471f2144d0ce7165d7323cb109f10f%3Bhb=refs/heads/libpng15
- [oss-security] 20120724 Re: CVE Request: libpng: Out-of heap-based buffer read by inflating certain PNG images
- http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=blob%3Bf=CHANGES%3Bh=2da5a7a8b690e257f94353b5b49d493cdc385322%3Bhb=refs/heads/libpng14
- http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=blob%3Bf=CHANGES%3Bh=284de253b1561b976291ba7405acd71ae71ff597%3Bhb=refs/heads/libpng10
- http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=blob%3Bf=CHANGES%3Bhb=a4b640865ae47986bbe71ecc0e7d5181dcb0bac8
Sources
- CVE-2012-3425 · CVE Program
- CVE-2012-3425 · NVD
- FIRST EPSS
- GHSA-2q8q-w58c-r6vg · GitHub Advisory Database · CC BY 4.0
- CVE-2012-3425 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences