REDHAT-BUG-1264015: Use After Free
First published: Thu Sep 17 2015(Updated: )
Use-after-free vulnerability in optipng 0.6.4 causing an invalid/double free was found. CVE request (containing valgrind report): <a href="http://seclists.org/oss-sec/2015/q3/556">http://seclists.org/oss-sec/2015/q3/556</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OptiPNG |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seclists.org/oss-sec/2015/q3/556
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1264018
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1264019
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1264020
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1075212
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1075212&action=edit
- https://bugzilla.redhat.com/show_bug.cgi?id=1264015
Frequently Asked Questions
What is the severity of REDHAT-BUG-1264015?
REDHAT-BUG-1264015 is classified as a use-after-free vulnerability, which can lead to potential memory corruption issues.
How do I fix REDHAT-BUG-1264015?
To fix REDHAT-BUG-1264015, you should update to the latest version of OptiPNG that addresses the vulnerability.
What systems are affected by REDHAT-BUG-1264015?
REDHAT-BUG-1264015 affects systems running OptiPNG version 0.6.4.
What are the risks associated with REDHAT-BUG-1264015?
The risks of REDHAT-BUG-1264015 include remote code execution and denial of service due to memory corruption.
Is there a known exploit for REDHAT-BUG-1264015?
At this time, there are no publicly reported exploits specifically targeting REDHAT-BUG-1264015.
- agent/type
- agent/weakness
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2015-7801
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/optipng
- canonical/optipng