CVE-2015-8472: Buffer Overflow
First published: Thu Nov 12 2015(Updated: )
Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/java | <1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11 | 1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11 |
| redhat/java | <1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11 | 1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11 |
| redhat/java | <1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7 | 1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7 |
| redhat/java | <1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7 | 1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7 |
| redhat/java | <1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7 | 1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7 |
| redhat/java | <1.8.0-oracle-1:1.8.0.71-1jpp.1.el7 | 1.8.0-oracle-1:1.8.0.71-1jpp.1.el7 |
| redhat/java | <1.7.0-oracle-1:1.7.0.95-1jpp.2.el7 | 1.7.0-oracle-1:1.7.0.95-1jpp.2.el7 |
| redhat/java | <1.6.0-sun-1:1.6.0.111-1jpp.1.el7 | 1.6.0-sun-1:1.6.0.111-1jpp.1.el7 |
| redhat/java | <1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5 | 1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el5 | 1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el5 |
| redhat/libpng | <2:1.2.49-2.el6_7 | 2:1.2.49-2.el6_7 |
| redhat/java | <1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7 | 1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7 |
| redhat/java | <1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7 | 1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7 |
| redhat/libpng12 | <0:1.2.50-7.el7_2 | 0:1.2.50-7.el7_2 |
| redhat/libpng | <2:1.5.13-7.el7_2 | 2:1.5.13-7.el7_2 |
| redhat/java | <1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7 | 1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7 |
| redhat/java | <1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7 | 1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7 |
| redhat/java | <1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5 | 1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5 |
| redhat/java | <1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7 | 1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7 |
| redhat/spacewalk-java | <0:2.0.2-109.el6 | 0:2.0.2-109.el6 |
| redhat/spacewalk-java | <0:2.3.8-146.el6 | 0:2.3.8-146.el6 |
| Apple Mac OS X | <=10.11.3 | |
| Libpng Libpng | =1.0.64 | |
| Libpng Libpng | =1.2.0 | |
| Libpng Libpng | =1.2.1 | |
| Libpng Libpng | =1.2.2 | |
| Libpng Libpng | =1.2.3 | |
| Libpng Libpng | =1.2.4 | |
| Libpng Libpng | =1.2.10 | |
| Libpng Libpng | =1.2.11 | |
| Libpng Libpng | =1.2.12 | |
| Libpng Libpng | =1.2.13 | |
| Libpng Libpng | =1.2.14 | |
| Libpng Libpng | =1.2.15 | |
| Libpng Libpng | =1.2.16 | |
| Libpng Libpng | =1.2.17 | |
| Libpng Libpng | =1.2.18 | |
| Libpng Libpng | =1.2.19 | |
| Libpng Libpng | =1.2.20 | |
| Libpng Libpng | =1.2.21 | |
| Libpng Libpng | =1.2.22 | |
| Libpng Libpng | =1.2.23 | |
| Libpng Libpng | =1.2.24 | |
| Libpng Libpng | =1.2.25 | |
| Libpng Libpng | =1.2.26 | |
| Libpng Libpng | =1.2.27 | |
| Libpng Libpng | =1.2.28 | |
| Libpng Libpng | =1.2.29 | |
| Libpng Libpng | =1.2.30 | |
| Libpng Libpng | =1.2.31 | |
| Libpng Libpng | =1.2.32 | |
| Libpng Libpng | =1.2.33 | |
| Libpng Libpng | =1.2.34 | |
| Libpng Libpng | =1.2.35 | |
| Libpng Libpng | =1.2.36 | |
| Libpng Libpng | =1.2.37 | |
| Libpng Libpng | =1.2.38 | |
| Libpng Libpng | =1.2.39 | |
| Libpng Libpng | =1.2.40 | |
| Libpng Libpng | =1.2.41 | |
| Libpng Libpng | =1.2.42 | |
| Libpng Libpng | =1.2.43 | |
| Libpng Libpng | =1.2.44 | |
| Libpng Libpng | =1.2.45 | |
| Libpng Libpng | =1.2.46 | |
| Libpng Libpng | =1.2.47 | |
| Libpng Libpng | =1.2.48 | |
| Libpng Libpng | =1.2.49 | |
| Libpng Libpng | =1.2.50 | |
| Libpng Libpng | =1.2.51 | |
| Libpng Libpng | =1.2.52 | |
| Libpng Libpng | =1.2.53 | |
| Libpng Libpng | =1.2.54 | |
| Libpng Libpng | =1.4.0 | |
| Libpng Libpng | =1.4.1 | |
| Libpng Libpng | =1.4.2 | |
| Libpng Libpng | =1.4.3 | |
| Libpng Libpng | =1.4.4 | |
| Libpng Libpng | =1.4.5 | |
| Libpng Libpng | =1.4.6 | |
| Libpng Libpng | =1.4.7 | |
| Libpng Libpng | =1.4.8 | |
| Libpng Libpng | =1.4.9 | |
| Libpng Libpng | =1.4.10 | |
| Libpng Libpng | =1.4.11 | |
| Libpng Libpng | =1.4.12 | |
| Libpng Libpng | =1.4.13 | |
| Libpng Libpng | =1.4.14 | |
| Libpng Libpng | =1.4.15 | |
| Libpng Libpng | =1.4.16 | |
| Libpng Libpng | =1.4.17 | |
| Libpng Libpng | =1.5.1 | |
| Libpng Libpng | =1.5.2 | |
| Libpng Libpng | =1.5.3 | |
| Libpng Libpng | =1.5.4 | |
| Libpng Libpng | =1.5.5 | |
| Libpng Libpng | =1.5.6 | |
| Libpng Libpng | =1.5.7 | |
| Libpng Libpng | =1.5.8 | |
| Libpng Libpng | =1.5.9 | |
| Libpng Libpng | =1.5.10 | |
| Libpng Libpng | =1.5.11 | |
| Libpng Libpng | =1.5.12 | |
| Libpng Libpng | =1.5.13 | |
| Libpng Libpng | =1.5.14 | |
| Libpng Libpng | =1.5.15 | |
| Libpng Libpng | =1.5.16 | |
| Libpng Libpng | =1.5.17 | |
| Libpng Libpng | =1.5.18 | |
| Libpng Libpng | =1.5.19 | |
| Libpng Libpng | =1.5.20 | |
| Libpng Libpng | =1.5.21 | |
| Libpng Libpng | =1.5.22 | |
| Libpng Libpng | =1.5.23 | |
| Libpng Libpng | =1.5.24 | |
| Libpng Libpng | =1.6.0 | |
| Libpng Libpng | =1.6.1 | |
| Libpng Libpng | =1.6.2 | |
| Libpng Libpng | =1.6.3 | |
| Libpng Libpng | =1.6.4 | |
| Libpng Libpng | =1.6.5 | |
| Libpng Libpng | =1.6.6 | |
| Libpng Libpng | =1.6.7 | |
| Libpng Libpng | =1.6.8 | |
| Libpng Libpng | =1.6.9 | |
| Libpng Libpng | =1.6.10 | |
| Libpng Libpng | =1.6.11 | |
| Libpng Libpng | =1.6.12 | |
| Libpng Libpng | =1.6.13 | |
| Libpng Libpng | =1.6.14 | |
| Libpng Libpng | =1.6.15 | |
| Libpng Libpng | =1.6.16 | |
| Libpng Libpng | =1.6.17 | |
| Libpng Libpng | =1.6.18 | |
| Libpng Libpng | =1.6.19 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174905.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174936.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175073.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html
- http://rhn.redhat.com/errata/RHSA-2015-2594.html
- http://rhn.redhat.com/errata/RHSA-2015-2595.html
- http://rhn.redhat.com/errata/RHSA-2015-2596.html
- http://rhn.redhat.com/errata/RHSA-2016-0055.html
- http://rhn.redhat.com/errata/RHSA-2016-0056.html
- http://rhn.redhat.com/errata/RHSA-2016-0057.html
- http://sourceforge.net/projects/libpng/files/libpng10/1.0.65/
- http://sourceforge.net/projects/libpng/files/libpng12/1.2.55/
- http://sourceforge.net/projects/libpng/files/libpng14/1.4.18/
- http://sourceforge.net/projects/libpng/files/libpng15/1.5.25/
- http://sourceforge.net/projects/libpng/files/libpng16/1.6.20/
- http://www.debian.org/security/2016/dsa-3443
- http://www.openwall.com/lists/oss-security/2015/12/03/6
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/78624
- https://access.redhat.com/errata/RHSA-2016:1430
- https://kc.mcafee.com/corporate/index?page=content&id=SB10148
- https://support.apple.com/HT206167
- https://www.cve.org/CVERecord?id=CVE-2015-8472 https://nvd.nist.gov/vuln/detail/CVE-2015-8472
- https://bugzilla.redhat.com/show_bug.cgi?id=1281756
- https://access.redhat.com/errata/RHSA-2016:0056
- https://access.redhat.com/errata/RHSA-2016:0057
- https://access.redhat.com/errata/RHSA-2016:0055
- https://access.redhat.com/errata/RHSA-2016:0100
- https://access.redhat.com/errata/RHSA-2016:0101
- https://access.redhat.com/errata/RHSA-2015:2594
- https://access.redhat.com/errata/RHSA-2016:0099
- https://access.redhat.com/errata/RHSA-2015:2595
- https://access.redhat.com/errata/RHSA-2015:2596
- https://access.redhat.com/errata/RHSA-2016:0098
- https://access.redhat.com/security/cve/CVE-2015-8472
Parent vulnerabilities
(Appears in the following advisories)
- collector/redhat-cve
- collector/nvd-index
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/weakness
- agent/references
- collector/mitre-cve
- source/MITRE
- package-manager/redhat
- vendor/apple
- canonical/apple mac os x
- version/apple mac os x/10.11.3
- vendor/libpng
- canonical/libpng libpng
- version/libpng libpng/1.0.64
- version/libpng libpng/1.2.0
- version/libpng libpng/1.2.1
- version/libpng libpng/1.2.2
- version/libpng libpng/1.2.3
- version/libpng libpng/1.2.4
- version/libpng libpng/1.2.10
- version/libpng libpng/1.2.11
- version/libpng libpng/1.2.12
- version/libpng libpng/1.2.13
- version/libpng libpng/1.2.14
- version/libpng libpng/1.2.15
- version/libpng libpng/1.2.16
- version/libpng libpng/1.2.17
- version/libpng libpng/1.2.18
- version/libpng libpng/1.2.19
- version/libpng libpng/1.2.20
- version/libpng libpng/1.2.21
- version/libpng libpng/1.2.22
- version/libpng libpng/1.2.23
- version/libpng libpng/1.2.24
- version/libpng libpng/1.2.25
- version/libpng libpng/1.2.26
- version/libpng libpng/1.2.27
- version/libpng libpng/1.2.28
- version/libpng libpng/1.2.29
- version/libpng libpng/1.2.30
- version/libpng libpng/1.2.31
- version/libpng libpng/1.2.32
- version/libpng libpng/1.2.33
- version/libpng libpng/1.2.34
- version/libpng libpng/1.2.35
- version/libpng libpng/1.2.36
- version/libpng libpng/1.2.37
- version/libpng libpng/1.2.38
- version/libpng libpng/1.2.39
- version/libpng libpng/1.2.40
- version/libpng libpng/1.2.41
- version/libpng libpng/1.2.42
- version/libpng libpng/1.2.43
- version/libpng libpng/1.2.44
- version/libpng libpng/1.2.45
- version/libpng libpng/1.2.46
- version/libpng libpng/1.2.47
- version/libpng libpng/1.2.48
- version/libpng libpng/1.2.49
- version/libpng libpng/1.2.50
- version/libpng libpng/1.2.51
- version/libpng libpng/1.2.52
- version/libpng libpng/1.2.53
- version/libpng libpng/1.2.54
- version/libpng libpng/1.4.0
- version/libpng libpng/1.4.1
- version/libpng libpng/1.4.2
- version/libpng libpng/1.4.3
- version/libpng libpng/1.4.4
- version/libpng libpng/1.4.5
- version/libpng libpng/1.4.6
- version/libpng libpng/1.4.7
- version/libpng libpng/1.4.8
- version/libpng libpng/1.4.9
- version/libpng libpng/1.4.10
- version/libpng libpng/1.4.11
- version/libpng libpng/1.4.12
- version/libpng libpng/1.4.13
- version/libpng libpng/1.4.14
- version/libpng libpng/1.4.15
- version/libpng libpng/1.4.16
- version/libpng libpng/1.4.17
- version/libpng libpng/1.5.1
- version/libpng libpng/1.5.2
- version/libpng libpng/1.5.3
- version/libpng libpng/1.5.4
- version/libpng libpng/1.5.5
- version/libpng libpng/1.5.6
- version/libpng libpng/1.5.7
- version/libpng libpng/1.5.8
- version/libpng libpng/1.5.9
- version/libpng libpng/1.5.10
- version/libpng libpng/1.5.11
- version/libpng libpng/1.5.12
- version/libpng libpng/1.5.13
- version/libpng libpng/1.5.14
- version/libpng libpng/1.5.15
- version/libpng libpng/1.5.16
- version/libpng libpng/1.5.17
- version/libpng libpng/1.5.18
- version/libpng libpng/1.5.19
- version/libpng libpng/1.5.20
- version/libpng libpng/1.5.21
- version/libpng libpng/1.5.22
- version/libpng libpng/1.5.23
- version/libpng libpng/1.5.24
- version/libpng libpng/1.6.0
- version/libpng libpng/1.6.1
- version/libpng libpng/1.6.2
- version/libpng libpng/1.6.3
- version/libpng libpng/1.6.4
- version/libpng libpng/1.6.5
- version/libpng libpng/1.6.6
- version/libpng libpng/1.6.7
- version/libpng libpng/1.6.8
- version/libpng libpng/1.6.9
- version/libpng libpng/1.6.10
- version/libpng libpng/1.6.11
- version/libpng libpng/1.6.12
- version/libpng libpng/1.6.13
- version/libpng libpng/1.6.14
- version/libpng libpng/1.6.15
- version/libpng libpng/1.6.16
- version/libpng libpng/1.6.17
- version/libpng libpng/1.6.18
- version/libpng libpng/1.6.19