Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 13 fixed, 4 without a fix
Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-189 and the CVSS impact.
Summary
Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 198
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_supplementary:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:* | 1.2.0 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:* | 1.2.1 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:* | 1.2.2 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:* | 1.2.3 | Vulnerable | pnggroup |
- cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_supplementary:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·pnggroup
Show 188 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:libpng:libpng:1.2.4:*:*:*:*:*:*:* | 1.2.4 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.5:*:*:*:*:*:*:* | 1.2.5 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.6:*:*:*:*:*:*:* | 1.2.6 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.7:*:*:*:*:*:*:* | 1.2.7 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.8:*:*:*:*:*:*:* | 1.2.8 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.9:*:*:*:*:*:*:* | 1.2.9 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.10:*:*:*:*:*:*:* | 1.2.10 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.11:*:*:*:*:*:*:* | 1.2.11 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.12:*:*:*:*:*:*:* | 1.2.12 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.13:*:*:*:*:*:*:* | 1.2.13 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.14:*:*:*:*:*:*:* | 1.2.14 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.15:*:*:*:*:*:*:* | 1.2.15 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.16:*:*:*:*:*:*:* | 1.2.16 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.17:*:*:*:*:*:*:* | 1.2.17 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.18:*:*:*:*:*:*:* | 1.2.18 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.19:*:*:*:*:*:*:* | 1.2.19 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.20:*:*:*:*:*:*:* | 1.2.20 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.21:*:*:*:*:*:*:* | 1.2.21 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.22:*:*:*:*:*:*:* | 1.2.22 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.23:*:*:*:*:*:*:* | 1.2.23 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.24:*:*:*:*:*:*:* | 1.2.24 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.25:*:*:*:*:*:*:* | 1.2.25 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.26:*:*:*:*:*:*:* | 1.2.26 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.27:*:*:*:*:*:*:* | 1.2.27 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.28:*:*:*:*:*:*:* | 1.2.28 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.29:*:*:*:*:*:*:* | 1.2.29 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.30:*:*:*:*:*:*:* | 1.2.30 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.31:*:*:*:*:*:*:* | 1.2.31 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.32:*:*:*:*:*:*:* | 1.2.32 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.33:*:*:*:*:*:*:* | 1.2.33 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.34:*:*:*:*:*:*:* | 1.2.34 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.35:*:*:*:*:*:*:* | 1.2.35 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.36:*:*:*:*:*:*:* | 1.2.36 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.37:*:*:*:*:*:*:* | 1.2.37 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.38:*:*:*:*:*:*:* | 1.2.38 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.39:*:*:*:*:*:*:* | 1.2.39 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.40:*:*:*:*:*:*:* | 1.2.40 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.41:*:*:*:*:*:*:* | 1.2.41 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.42:*:*:*:*:*:*:* | 1.2.42 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.43:*:*:*:*:*:*:* | 1.2.43 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.43:devel:*:*:*:*:*:* | 1.2.43 devel | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.44:*:*:*:*:*:*:* | 1.2.44 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.45:*:*:*:*:*:*:* | 1.2.45 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.45:devel:*:*:*:*:*:* | 1.2.45 devel | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.46:*:*:*:*:*:*:* | 1.2.46 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.46:devel:*:*:*:*:*:* | 1.2.46 devel | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.47:*:*:*:*:*:*:* | 1.2.47 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.47:beta:*:*:*:*:*:* | 1.2.47 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.48:*:*:*:*:*:*:* | 1.2.48 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.48:betas:*:*:*:*:*:* | 1.2.48 betas | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.49:*:*:*:*:*:*:* | 1.2.49 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.50:*:*:*:*:*:*:* | 1.2.50 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.51:*:*:*:*:*:*:* | 1.2.51 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.52:*:*:*:*:*:*:* | 1.2.52 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.53:*:*:*:*:*:*:* | 1.2.53 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.54:*:*:*:*:*:*:* | 1.2.54 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.2.55:*:*:*:*:*:*:* | 1.2.55 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.1.1:*:*:*:*:*:*:* | 1.1.1 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.0:*:*:*:*:*:*:* | 1.0.0 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.1:*:*:*:*:*:*:* | 1.0.1 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.2:*:*:*:*:*:*:* | 1.0.2 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.3:*:*:*:*:*:*:* | 1.0.3 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.5:*:*:*:*:*:*:* | 1.0.5 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.6:*:*:*:*:*:*:* | 1.0.6 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.7:*:*:*:*:*:*:* | 1.0.7 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.8:*:*:*:*:*:*:* | 1.0.8 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.9:*:*:*:*:*:*:* | 1.0.9 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.10:*:*:*:*:*:*:* | 1.0.10 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.11:*:*:*:*:*:*:* | 1.0.11 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.12:*:*:*:*:*:*:* | 1.0.12 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.13:*:*:*:*:*:*:* | 1.0.13 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.14:*:*:*:*:*:*:* | 1.0.14 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.15:*:*:*:*:*:*:* | 1.0.15 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.16:*:*:*:*:*:*:* | 1.0.16 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.17:*:*:*:*:*:*:* | 1.0.17 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.18:*:*:*:*:*:*:* | 1.0.18 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.19:*:*:*:*:*:*:* | 1.0.19 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.20:*:*:*:*:*:*:* | 1.0.20 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.21:*:*:*:*:*:*:* | 1.0.21 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.22:*:*:*:*:*:*:* | 1.0.22 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.23:*:*:*:*:*:*:* | 1.0.23 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.24:*:*:*:*:*:*:* | 1.0.24 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.25:*:*:*:*:*:*:* | 1.0.25 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.26:*:*:*:*:*:*:* | 1.0.26 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.27:*:*:*:*:*:*:* | 1.0.27 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.28:*:*:*:*:*:*:* | 1.0.28 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.29:*:*:*:*:*:*:* | 1.0.29 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.30:*:*:*:*:*:*:* | 1.0.30 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.31:*:*:*:*:*:*:* | 1.0.31 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.32:*:*:*:*:*:*:* | 1.0.32 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.33:*:*:*:*:*:*:* | 1.0.33 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.34:*:*:*:*:*:*:* | 1.0.34 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.35:*:*:*:*:*:*:* | 1.0.35 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.37:*:*:*:*:*:*:* | 1.0.37 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.38:*:*:*:*:*:*:* | 1.0.38 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.39:*:*:*:*:*:*:* | 1.0.39 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.40:*:*:*:*:*:*:* | 1.0.40 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.41:*:*:*:*:*:*:* | 1.0.41 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.42:*:*:*:*:*:*:* | 1.0.42 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.43:*:*:*:*:*:*:* | 1.0.43 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.44:*:*:*:*:*:*:* | 1.0.44 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.45:*:*:*:*:*:*:* | 1.0.45 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.46:*:*:*:*:*:*:* | 1.0.46 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.47:*:*:*:*:*:*:* | 1.0.47 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.48:*:*:*:*:*:*:* | 1.0.48 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.50:*:*:*:*:*:*:* | 1.0.50 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.51:*:*:*:*:*:*:* | 1.0.51 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.52:*:*:*:*:*:*:* | 1.0.52 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.53:*:*:*:*:*:*:* | 1.0.53 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.54:*:*:*:*:*:*:* | 1.0.54 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.55:*:*:*:*:*:*:* | 1.0.55 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.55:rc01:*:*:*:*:*:* | 1.0.55 rc01 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.56:*:*:*:*:*:*:* | 1.0.56 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.56:devel:*:*:*:*:*:* | 1.0.56 devel | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.57:*:*:*:*:*:*:* | 1.0.57 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.57:rc01:*:*:*:*:*:* | 1.0.57 rc01 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.58:*:*:*:*:*:*:* | 1.0.58 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.59:*:*:*:*:*:*:* | 1.0.59 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.60:*:*:*:*:*:*:* | 1.0.60 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.61:*:*:*:*:*:*:* | 1.0.61 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.62:*:*:*:*:*:*:* | 1.0.62 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.63:*:*:*:*:*:*:* | 1.0.63 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.64:*:*:*:*:*:*:* | 1.0.64 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.0.65:*:*:*:*:*:*:* | 1.0.65 | Vulnerable | pnggroup |
| cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:* | 23 | Vulnerable | Fedoraproject |
| cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Debian |
| cpe:2.3:a:libpng:libpng:1.4.0:*:*:*:*:*:*:* | 1.4.0 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.1:*:*:*:*:*:*:* | 1.4.1 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.2:*:*:*:*:*:*:* | 1.4.2 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.3:*:*:*:*:*:*:* | 1.4.3 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.4:*:*:*:*:*:*:* | 1.4.4 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.5:*:*:*:*:*:*:* | 1.4.5 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.6:*:*:*:*:*:*:* | 1.4.6 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.7:*:*:*:*:*:*:* | 1.4.7 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.8:*:*:*:*:*:*:* | 1.4.8 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.9:*:*:*:*:*:*:* | 1.4.9 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.10:*:*:*:*:*:*:* | 1.4.10 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.11:*:*:*:*:*:*:* | 1.4.11 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.12:*:*:*:*:*:*:* | 1.4.12 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.13:*:*:*:*:*:*:* | 1.4.13 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.14:*:*:*:*:*:*:* | 1.4.14 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.15:*:*:*:*:*:*:* | 1.4.15 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.16:*:*:*:*:*:*:* | 1.4.16 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.17:*:*:*:*:*:*:* | 1.4.17 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.4.18:*:*:*:*:*:*:* | 1.4.18 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:0.90:*:*:*:*:*:*:* | 0.90 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:0.95:*:*:*:*:*:*:* | 0.95 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:0.96:*:*:*:*:*:*:* | 0.96 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:0.97:*:*:*:*:*:*:* | 0.97 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:0.98:*:*:*:*:*:*:* | 0.98 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:0.99:*:*:*:*:*:*:* | 0.99 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.0:beta:*:*:*:*:*:* | 1.5.0 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.1:*:*:*:*:*:*:* | 1.5.1 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.1:beta:*:*:*:*:*:* | 1.5.1 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.2:*:*:*:*:*:*:* | 1.5.2 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.2:beta:*:*:*:*:*:* | 1.5.2 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.3:beta:*:*:*:*:*:* | 1.5.3 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.4:*:*:*:*:*:*:* | 1.5.4 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.4:beta:*:*:*:*:*:* | 1.5.4 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.5:*:*:*:*:*:*:* | 1.5.5 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.5:beta:*:*:*:*:*:* | 1.5.5 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.6:*:*:*:*:*:*:* | 1.5.6 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.6:beta:*:*:*:*:*:* | 1.5.6 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.7:*:*:*:*:*:*:* | 1.5.7 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.7:beta:*:*:*:*:*:* | 1.5.7 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.8:*:*:*:*:*:*:* | 1.5.8 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.8:beta:*:*:*:*:*:* | 1.5.8 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.9:*:*:*:*:*:*:* | 1.5.9 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.9:beta:*:*:*:*:*:* | 1.5.9 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.10:beta:*:*:*:*:*:* | 1.5.10 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.11:*:*:*:*:*:*:* | 1.5.11 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.11:beta:*:*:*:*:*:* | 1.5.11 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.12:*:*:*:*:*:*:* | 1.5.12 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.13:*:*:*:*:*:*:* | 1.5.13 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.13:beta:*:*:*:*:*:* | 1.5.13 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.14:*:*:*:*:*:*:* | 1.5.14 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.15:*:*:*:*:*:*:* | 1.5.15 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.16:*:*:*:*:*:*:* | 1.5.16 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.17:*:*:*:*:*:*:* | 1.5.17 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.18:*:*:*:*:*:*:* | 1.5.18 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.19:*:*:*:*:*:*:* | 1.5.19 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.20:beta:*:*:*:*:*:* | 1.5.20 beta | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.21:*:*:*:*:*:*:* | 1.5.21 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.22:*:*:*:*:*:*:* | 1.5.22 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.23:*:*:*:*:*:*:* | 1.5.23 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.24:*:*:*:*:*:*:* | 1.5.24 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.5.25:*:*:*:*:*:*:* | 1.5.25 | Vulnerable | pnggroup |
| cpe:2.3:a:libpng:libpng:1.3.0:*:*:*:*:*:*:* | 1.3.0 | Vulnerable | pnggroup |
- cpe:2.3:a:libpng:libpng:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.5:*:*:*:*:*:*:* Versions 1.2.5 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.6:*:*:*:*:*:*:* Versions 1.2.6 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.7:*:*:*:*:*:*:* Versions 1.2.7 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.8:*:*:*:*:*:*:* Versions 1.2.8 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.9:*:*:*:*:*:*:* Versions 1.2.9 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.10:*:*:*:*:*:*:* Versions 1.2.10 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.11:*:*:*:*:*:*:* Versions 1.2.11 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.12:*:*:*:*:*:*:* Versions 1.2.12 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.13:*:*:*:*:*:*:* Versions 1.2.13 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.14:*:*:*:*:*:*:* Versions 1.2.14 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.15:*:*:*:*:*:*:* Versions 1.2.15 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.16:*:*:*:*:*:*:* Versions 1.2.16 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.17:*:*:*:*:*:*:* Versions 1.2.17 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.18:*:*:*:*:*:*:* Versions 1.2.18 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.19:*:*:*:*:*:*:* Versions 1.2.19 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.20:*:*:*:*:*:*:* Versions 1.2.20 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.21:*:*:*:*:*:*:* Versions 1.2.21 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.22:*:*:*:*:*:*:* Versions 1.2.22 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.23:*:*:*:*:*:*:* Versions 1.2.23 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.24:*:*:*:*:*:*:* Versions 1.2.24 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.25:*:*:*:*:*:*:* Versions 1.2.25 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.26:*:*:*:*:*:*:* Versions 1.2.26 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.27:*:*:*:*:*:*:* Versions 1.2.27 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.28:*:*:*:*:*:*:* Versions 1.2.28 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.29:*:*:*:*:*:*:* Versions 1.2.29 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.30:*:*:*:*:*:*:* Versions 1.2.30 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.31:*:*:*:*:*:*:* Versions 1.2.31 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.32:*:*:*:*:*:*:* Versions 1.2.32 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.33:*:*:*:*:*:*:* Versions 1.2.33 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.34:*:*:*:*:*:*:* Versions 1.2.34 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.35:*:*:*:*:*:*:* Versions 1.2.35 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.36:*:*:*:*:*:*:* Versions 1.2.36 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.37:*:*:*:*:*:*:* Versions 1.2.37 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.38:*:*:*:*:*:*:* Versions 1.2.38 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.39:*:*:*:*:*:*:* Versions 1.2.39 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.40:*:*:*:*:*:*:* Versions 1.2.40 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.41:*:*:*:*:*:*:* Versions 1.2.41 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.42:*:*:*:*:*:*:* Versions 1.2.42 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.43:*:*:*:*:*:*:* Versions 1.2.43 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.43:devel:*:*:*:*:*:* Versions 1.2.43 devel Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.44:*:*:*:*:*:*:* Versions 1.2.44 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.45:*:*:*:*:*:*:* Versions 1.2.45 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.45:devel:*:*:*:*:*:* Versions 1.2.45 devel Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.46:*:*:*:*:*:*:* Versions 1.2.46 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.46:devel:*:*:*:*:*:* Versions 1.2.46 devel Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.47:*:*:*:*:*:*:* Versions 1.2.47 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.47:beta:*:*:*:*:*:* Versions 1.2.47 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.48:*:*:*:*:*:*:* Versions 1.2.48 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.48:betas:*:*:*:*:*:* Versions 1.2.48 betas Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.49:*:*:*:*:*:*:* Versions 1.2.49 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.50:*:*:*:*:*:*:* Versions 1.2.50 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.51:*:*:*:*:*:*:* Versions 1.2.51 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.52:*:*:*:*:*:*:* Versions 1.2.52 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.53:*:*:*:*:*:*:* Versions 1.2.53 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.54:*:*:*:*:*:*:* Versions 1.2.54 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.2.55:*:*:*:*:*:*:* Versions 1.2.55 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.9:*:*:*:*:*:*:* Versions 1.0.9 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.10:*:*:*:*:*:*:* Versions 1.0.10 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.11:*:*:*:*:*:*:* Versions 1.0.11 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.12:*:*:*:*:*:*:* Versions 1.0.12 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.13:*:*:*:*:*:*:* Versions 1.0.13 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.14:*:*:*:*:*:*:* Versions 1.0.14 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.15:*:*:*:*:*:*:* Versions 1.0.15 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.16:*:*:*:*:*:*:* Versions 1.0.16 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.17:*:*:*:*:*:*:* Versions 1.0.17 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.18:*:*:*:*:*:*:* Versions 1.0.18 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.19:*:*:*:*:*:*:* Versions 1.0.19 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.20:*:*:*:*:*:*:* Versions 1.0.20 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.21:*:*:*:*:*:*:* Versions 1.0.21 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.22:*:*:*:*:*:*:* Versions 1.0.22 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.23:*:*:*:*:*:*:* Versions 1.0.23 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.24:*:*:*:*:*:*:* Versions 1.0.24 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.25:*:*:*:*:*:*:* Versions 1.0.25 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.26:*:*:*:*:*:*:* Versions 1.0.26 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.27:*:*:*:*:*:*:* Versions 1.0.27 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.28:*:*:*:*:*:*:* Versions 1.0.28 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.29:*:*:*:*:*:*:* Versions 1.0.29 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.30:*:*:*:*:*:*:* Versions 1.0.30 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.31:*:*:*:*:*:*:* Versions 1.0.31 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.32:*:*:*:*:*:*:* Versions 1.0.32 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.33:*:*:*:*:*:*:* Versions 1.0.33 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.34:*:*:*:*:*:*:* Versions 1.0.34 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.35:*:*:*:*:*:*:* Versions 1.0.35 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.37:*:*:*:*:*:*:* Versions 1.0.37 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.38:*:*:*:*:*:*:* Versions 1.0.38 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.39:*:*:*:*:*:*:* Versions 1.0.39 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.40:*:*:*:*:*:*:* Versions 1.0.40 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.41:*:*:*:*:*:*:* Versions 1.0.41 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.42:*:*:*:*:*:*:* Versions 1.0.42 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.43:*:*:*:*:*:*:* Versions 1.0.43 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.44:*:*:*:*:*:*:* Versions 1.0.44 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.45:*:*:*:*:*:*:* Versions 1.0.45 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.46:*:*:*:*:*:*:* Versions 1.0.46 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.47:*:*:*:*:*:*:* Versions 1.0.47 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.48:*:*:*:*:*:*:* Versions 1.0.48 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.50:*:*:*:*:*:*:* Versions 1.0.50 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.51:*:*:*:*:*:*:* Versions 1.0.51 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.52:*:*:*:*:*:*:* Versions 1.0.52 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.53:*:*:*:*:*:*:* Versions 1.0.53 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.54:*:*:*:*:*:*:* Versions 1.0.54 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.55:*:*:*:*:*:*:* Versions 1.0.55 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.55:rc01:*:*:*:*:*:* Versions 1.0.55 rc01 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.56:*:*:*:*:*:*:* Versions 1.0.56 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.56:devel:*:*:*:*:*:* Versions 1.0.56 devel Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.57:*:*:*:*:*:*:* Versions 1.0.57 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.57:rc01:*:*:*:*:*:* Versions 1.0.57 rc01 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.58:*:*:*:*:*:*:* Versions 1.0.58 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.59:*:*:*:*:*:*:* Versions 1.0.59 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.60:*:*:*:*:*:*:* Versions 1.0.60 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.61:*:*:*:*:*:*:* Versions 1.0.61 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.62:*:*:*:*:*:*:* Versions 1.0.62 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.63:*:*:*:*:*:*:* Versions 1.0.63 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.64:*:*:*:*:*:*:* Versions 1.0.64 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.0.65:*:*:*:*:*:*:* Versions 1.0.65 Vulnerable ·pnggroup
- cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:* Versions 23 Vulnerable ·Fedoraproject
- cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Debian
- cpe:2.3:a:libpng:libpng:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.4:*:*:*:*:*:*:* Versions 1.4.4 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.6:*:*:*:*:*:*:* Versions 1.4.6 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.7:*:*:*:*:*:*:* Versions 1.4.7 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.8:*:*:*:*:*:*:* Versions 1.4.8 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.9:*:*:*:*:*:*:* Versions 1.4.9 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.10:*:*:*:*:*:*:* Versions 1.4.10 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.11:*:*:*:*:*:*:* Versions 1.4.11 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.12:*:*:*:*:*:*:* Versions 1.4.12 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.13:*:*:*:*:*:*:* Versions 1.4.13 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.14:*:*:*:*:*:*:* Versions 1.4.14 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.15:*:*:*:*:*:*:* Versions 1.4.15 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.16:*:*:*:*:*:*:* Versions 1.4.16 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.17:*:*:*:*:*:*:* Versions 1.4.17 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.4.18:*:*:*:*:*:*:* Versions 1.4.18 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:0.90:*:*:*:*:*:*:* Versions 0.90 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:0.95:*:*:*:*:*:*:* Versions 0.95 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:0.96:*:*:*:*:*:*:* Versions 0.96 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:0.97:*:*:*:*:*:*:* Versions 0.97 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:0.98:*:*:*:*:*:*:* Versions 0.98 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:0.99:*:*:*:*:*:*:* Versions 0.99 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.0:beta:*:*:*:*:*:* Versions 1.5.0 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.1:beta:*:*:*:*:*:* Versions 1.5.1 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.2:*:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.2:beta:*:*:*:*:*:* Versions 1.5.2 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.3:beta:*:*:*:*:*:* Versions 1.5.3 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.4:*:*:*:*:*:*:* Versions 1.5.4 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.4:beta:*:*:*:*:*:* Versions 1.5.4 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.5:*:*:*:*:*:*:* Versions 1.5.5 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.5:beta:*:*:*:*:*:* Versions 1.5.5 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.6:*:*:*:*:*:*:* Versions 1.5.6 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.6:beta:*:*:*:*:*:* Versions 1.5.6 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.7:*:*:*:*:*:*:* Versions 1.5.7 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.7:beta:*:*:*:*:*:* Versions 1.5.7 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.8:*:*:*:*:*:*:* Versions 1.5.8 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.8:beta:*:*:*:*:*:* Versions 1.5.8 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.9:*:*:*:*:*:*:* Versions 1.5.9 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.9:beta:*:*:*:*:*:* Versions 1.5.9 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.10:beta:*:*:*:*:*:* Versions 1.5.10 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.11:*:*:*:*:*:*:* Versions 1.5.11 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.11:beta:*:*:*:*:*:* Versions 1.5.11 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.12:*:*:*:*:*:*:* Versions 1.5.12 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.13:*:*:*:*:*:*:* Versions 1.5.13 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.13:beta:*:*:*:*:*:* Versions 1.5.13 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.14:*:*:*:*:*:*:* Versions 1.5.14 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.15:*:*:*:*:*:*:* Versions 1.5.15 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.16:*:*:*:*:*:*:* Versions 1.5.16 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.17:*:*:*:*:*:*:* Versions 1.5.17 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.18:*:*:*:*:*:*:* Versions 1.5.18 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.19:*:*:*:*:*:*:* Versions 1.5.19 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.20:beta:*:*:*:*:*:* Versions 1.5.20 beta Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.21:*:*:*:*:*:*:* Versions 1.5.21 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.22:*:*:*:*:*:*:* Versions 1.5.22 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.23:*:*:*:*:*:*:* Versions 1.5.23 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.24:*:*:*:*:*:*:* Versions 1.5.24 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.5.25:*:*:*:*:*:*:* Versions 1.5.25 Vulnerable ·pnggroup
- cpe:2.3:a:libpng:libpng:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·pnggroup
Remediation
Red Hat 4 advisories
- RHSA-2016:1430 Released 2016-07-18 · Red Hat rating Moderatejava-1.7.0-ibm and java-1.7.1-ibm security update
- Red Hat Satellite 5.6 (RHEL v.5) java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5, java-1.7.0-ibm-devel-1:1.7.0.9.40-1jpp.1.el5, spacewalk-java-2.0.2-109.el5sat +5
- Red Hat Satellite 5.6 (RHEL v.6) java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.40-1jpp.1.el6_7, spacewalk-java-2.0.2-109.el6sat +5
- Red Hat Satellite 5.7 (RHEL v.6) java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.40-1jpp.1.el6_7, spacewalk-java-2.3.8-146.el6sat +5
- RHSA-2016:0099 Released 2016-02-02 · Red Hat rating Criticaljava-1.7.1-ibm security update
- Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.1.el7 +3
- Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.1.el7 +1
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.2.el6_7 +3
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.2.el6_7 +1
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.2.el6_7 +3
- Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.ppc, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.1.el7 +6
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.2.el6_7 +3
- Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.1.el7 +3
- RHSA-2016:0100 Released 2016-02-02 · Red Hat rating Criticaljava-1.7.0-ibm security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5, java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5.i386, java-1.7.0-ibm-demo-1:1.7.0.9.30-1jpp.1.el5 +9
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5, java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5.i386, java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5.ppc +15
Show 1 more Red Hat advisories
- RHSA-2016:0101 Released 2016-02-02 · Red Hat rating Criticaljava-1.6.0-ibm security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el5.i386, java-1.6.0-ibm-accessibility-1:1.6.0.16.20-1jpp.1.el5 +13
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-demo-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-devel-1:1.6.0.16.20-1jpp.1.el6_7 +4
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-demo-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-devel-1:1.6.0.16.20-1jpp.1.el6_7 +2
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el5.i386, java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el5.ppc +21
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-demo-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-devel-1:1.6.0.16.20-1jpp.1.el6_7 +4
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-demo-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-devel-1:1.6.0.16.20-1jpp.1.el6_7 +4
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 5 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 8 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux Client Supplementary (v. 7) | Fixed | RHSA-2016:0099 |
| Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) | Fixed | RHSA-2016:0099 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 5) | Fixed | RHSA-2016:0100, RHSA-2016:0101 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 6) | Fixed | RHSA-2016:0099, RHSA-2016:0101 |
| Red Hat Enterprise Linux HPC Node Supplementary (v. 6) | Fixed | RHSA-2016:0099, RHSA-2016:0101 |
| Red Hat Enterprise Linux Server Supplementary (v. 5) | Fixed | RHSA-2016:0100, RHSA-2016:0101 |
| Red Hat Enterprise Linux Server Supplementary (v. 6) | Fixed | RHSA-2016:0099, RHSA-2016:0101 |
| Red Hat Enterprise Linux Server Supplementary (v. 7) | Fixed | RHSA-2016:0099 |
| Red Hat Enterprise Linux Workstation Supplementary (v. 6) | Fixed | RHSA-2016:0099, RHSA-2016:0101 |
| Red Hat Enterprise Linux Workstation Supplementary (v. 7) | Fixed | RHSA-2016:0099 |
| Red Hat Satellite 5.6 (RHEL v.5) | Fixed | RHSA-2016:1430 |
| Red Hat Satellite 5.6 (RHEL v.6) | Fixed | RHSA-2016:1430 |
| Red Hat Satellite 5.7 (RHEL v.6) | Fixed | RHSA-2016:1430 |
Not affected: 1 product
- Red Hat Enterprise Linux 8
Timeline
- 2026-10-02 Threatist record created from CVE-2015-8540
- 2026-10-03 Alias added: GHSA-7qhq-6293-wrx3
References
Patch 4
Other 10
- [oss-security] 20151211 Re: Re: CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c)
- http://sourceforge.net/p/libpng/code/ci/d9006f683c641793252d92254a75ae9b815b42ed/
- [oss-security] 20151210 CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c)
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- [oss-security] 20151211 Re: CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c)
- [oss-security] 20151210 Re: CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c)
- http://sourceforge.net/p/libpng/bugs/244/
- [oss-security] 20151217 Re: CVE request - read underflow in libpng 1.2.55, 1.0.65, 1.4.18, and 1.5.25 (pngwutil.c)
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
Sources
- CVE-2015-8540 · CVE Program
- CVE-2015-8540 · NVD
- FIRST EPSS
- GHSA-7qhq-6293-wrx3 · GitHub Advisory Database · CC BY 4.0
- CVE-2015-8540 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences