6.5

CVE-2018-13785

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libpng ≫ Libpng Version 1.6.34
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 17.10
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Oracle ≫ Jdk Version 1.6.0 Update update201
Oracle ≫ Jdk Version 1.7.0 Update update191
Oracle ≫ Jdk Version 1.8.0 Update update181
Oracle ≫ Jdk Version 11.0.0
Oracle ≫ Jre Version 1.6.0 Update update201
Oracle ≫ Jre Version 1.7.0 Update update191
Oracle ≫ Jre Version 1.8.0 Update update181
Oracle ≫ Jre Version 11.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.47% 0.902
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CISA-ADP 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

CWE-369 Divide By Zero

The product divides a value by zero.

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
Patch
Vendor Advisory
https://usn.ubuntu.com/3712-1/
Third Party Advisory
http://www.securityfocus.com/bid/105599
Third Party Advisory
Broken Link
VDB Entry
http://www.securitytracker.com/id/1041889
Third Party Advisory
Broken Link
VDB Entry
https://access.redhat.com/errata/RHSA-2018:3000
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3001
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3002
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3003
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3007
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3008
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3533
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3534
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3671
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3672
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3779
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3852
Third Party Advisory
https://github.com/glennrp/libpng/commit/8a05766cb74af05c04c53e6c9d60c13fc4d59bf2
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201908-10
Third Party Advisory
https://security.netapp.com/advisory/ntap-20181018-0001/
Third Party Advisory
https://sourceforge.net/p/libpng/bugs/278/
Third Party Advisory