Summary
It was discovered that pngcheck incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to cause a
denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | pngcheck | 2.3.0-7ubuntu0.20.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | pngcheck | 2.3.0-7ubuntu0.16.04.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | pngcheck | 2.3.0-7ubuntu0.18.04.1~esm1 |
Vulnerabilities 2
-
Unscored —CVE-2020-27818 Public exploit
A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be …
-
Unscored —
A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png fil…