CVE-2011-2501: Medium severity libp2p vulnerability
It was reported [1] that the fix for CVE-2004-0421 in libpng was inadvertently reverted during the 1.2.23 development cycle. The original flaw could be used to cause a denial of service via a carefully-crafted PNG image.
This would affect all versions of libpng >=1.2.23, including 1.4.x and 1.5.x.
[1] http://sourceforge.net/mailarchive/forum.php?threadname=BANLkTikrnU6FJNQYFvwmt78hwpgKPVRd1Q%40mail.gmail.com&forumname=png-mng-implement
Other sources
The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2501?
CVE-2011-2501 has a moderate severity level due to its potential for denial of service.
How do I fix CVE-2011-2501?
To fix CVE-2011-2501, users should upgrade to libpng version 1.4.8 or later.
Which versions of libpng are affected by CVE-2011-2501?
CVE-2011-2501 affects libpng versions before 1.4.8, including versions from 1.0.0 to 1.0.55 and 1.2.0 to 1.2.45.
Is CVE-2011-2501 specific to certain operating systems?
Yes, CVE-2011-2501 impacts various operating systems that utilize the affected versions of libpng.
What types of attacks can CVE-2011-2501 facilitate?
CVE-2011-2501 can be exploited to cause denial of service attacks through specially crafted PNG images.