Summary
Patrick Keshishian discovered that libpng incorrectly handled certain PNG files.
An attacker could possibly use this to cause a denial of service. This issue
only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-10087)
Thuan Pham discovered that libpng incorrectly handled certain PNG files.
An attacker could possibly use this to cause a denial of service.
This issue only affected Ubuntu 17.10 and Ubuntu 18.04 LTS.
(CVE-2018-13785)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libpng | 1.2.50-1ubuntu2.14.04.3 |
| Ubuntu · 16.04 LTS 16.04:LTS | libpng | 1.2.54-1ubuntu1.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | libpng1.6 | 1.6.34-1ubuntu0.18.04.1 |
Vulnerabilities 2
-
Medium 6.5
In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an …
-
Unscored —
The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28…