Test Kennung:	1.3.6.1.4.1.25623.1.0.703443
Kategorie:	Debian Local Security Checks
Titel:	Debian Security Advisory DSA 3443-1 (libpng - security update)
Zusammenfassung:	Several vulnerabilities have been;discovered in the libpng PNG library. The Common Vulnerabilities and Exposures;project identifies the following problems:;;CVE-2015-8472It was discovered that the original fix for;CVE-2015-8126;was;incomplete and did not detect a potential overrun by applications;using png_set_PLTE directly. A remote attacker can take advantage of;this flaw to cause a denial of service (application crash).;;CVE-2015-8540;Xiao Qixue and Chen Yu discovered a flaw in the png_check_keyword;function. A remote attacker can potentially take advantage of this;flaw to cause a denial of service (application crash).
Beschreibung:	Summary: Several vulnerabilities have been discovered in the libpng PNG library. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-8472It was discovered that the original fix for CVE-2015-8126 was incomplete and did not detect a potential overrun by applications using png_set_PLTE directly. A remote attacker can take advantage of this flaw to cause a denial of service (application crash). CVE-2015-8540 Xiao Qixue and Chen Yu discovered a flaw in the png_check_keyword function. A remote attacker can potentially take advantage of this flaw to cause a denial of service (application crash). Affected Software/OS: libpng on Debian Linux Solution: For the oldstable distribution (wheezy), these problems have been fixed in version 1.2.49-1+deb7u2. For the stable distribution (jessie), these problems have been fixed in version 1.2.50-2+deb8u2. We recommend that you upgrade your libpng packages. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8126 http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html BugTraq ID: 77568 http://www.securityfocus.com/bid/77568 Debian Security Information: DSA-3399 (Google Search) http://www.debian.org/security/2015/dsa-3399 Debian Security Information: DSA-3507 (Google Search) http://www.debian.org/security/2016/dsa-3507 http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172769.html http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172620.html http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174936.html http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175073.html http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172663.html http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172324.html http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172823.html http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172797.html http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174905.html http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172647.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177382.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177344.html https://security.gentoo.org/glsa/201603-09 https://security.gentoo.org/glsa/201611-08 http://www.openwall.com/lists/oss-security/2015/11/12/2 RedHat Security Advisories: RHSA-2015:2594 http://rhn.redhat.com/errata/RHSA-2015-2594.html RedHat Security Advisories: RHSA-2015:2595 http://rhn.redhat.com/errata/RHSA-2015-2595.html RedHat Security Advisories: RHSA-2015:2596 http://rhn.redhat.com/errata/RHSA-2015-2596.html RedHat Security Advisories: RHSA-2016:0055 http://rhn.redhat.com/errata/RHSA-2016-0055.html RedHat Security Advisories: RHSA-2016:0056 http://rhn.redhat.com/errata/RHSA-2016-0056.html RedHat Security Advisories: RHSA-2016:0057 http://rhn.redhat.com/errata/RHSA-2016-0057.html RedHat Security Advisories: RHSA-2016:1430 https://access.redhat.com/errata/RHSA-2016:1430 http://www.securitytracker.com/id/1034142 SuSE Security Announcement: SUSE-SU-2016:0256 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html SuSE Security Announcement: SUSE-SU-2016:0265 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html SuSE Security Announcement: SUSE-SU-2016:0269 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html SuSE Security Announcement: SUSE-SU-2016:0665 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html SuSE Security Announcement: openSUSE-SU-2015:2099 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00033.html SuSE Security Announcement: openSUSE-SU-2015:2100 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00034.html SuSE Security Announcement: openSUSE-SU-2015:2135 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-11/msg00159.html SuSE Security Announcement: openSUSE-SU-2015:2136 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-11/msg00160.html SuSE Security Announcement: openSUSE-SU-2015:2262 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-12/msg00062.html SuSE Security Announcement: openSUSE-SU-2015:2263 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-12/msg00063.html SuSE Security Announcement: openSUSE-SU-2016:0103 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-01/msg00028.html SuSE Security Announcement: openSUSE-SU-2016:0104 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-01/msg00029.html SuSE Security Announcement: openSUSE-SU-2016:0105 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-01/msg00030.html SuSE Security Announcement: openSUSE-SU-2016:0263 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html SuSE Security Announcement: openSUSE-SU-2016:0268 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html SuSE Security Announcement: openSUSE-SU-2016:0270 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html SuSE Security Announcement: openSUSE-SU-2016:0272 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html SuSE Security Announcement: openSUSE-SU-2016:0279 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html SuSE Security Announcement: openSUSE-SU-2016:0664 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html SuSE Security Announcement: openSUSE-SU-2016:0684 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html SuSE Security Announcement: openSUSE-SU-2016:0729 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html http://www.ubuntu.com/usn/USN-2815-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-8472 BugTraq ID: 78624 http://www.securityfocus.com/bid/78624 Debian Security Information: DSA-3443 (Google Search) http://www.debian.org/security/2016/dsa-3443 http://www.openwall.com/lists/oss-security/2015/12/03/6 Common Vulnerability Exposure (CVE) ID: CVE-2015-8540 BugTraq ID: 80592 http://www.securityfocus.com/bid/80592 http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174435.html https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E http://www.openwall.com/lists/oss-security/2015/12/10/6 http://www.openwall.com/lists/oss-security/2015/12/10/7 http://www.openwall.com/lists/oss-security/2015/12/11/1 http://www.openwall.com/lists/oss-security/2015/12/11/2 http://www.openwall.com/lists/oss-security/2015/12/17/10
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.