6.5

CVE-2018-13785

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libpng ≫ Libpng Version1.6.34
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version17.10
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Oracle ≫ Jdk Version1.6.0 Updateupdate201
Oracle ≫ Jdk Version1.7.0 Updateupdate191
Oracle ≫ Jdk Version1.8.0 Updateupdate181
Oracle ≫ Jdk Version11.0.0
Oracle ≫ Jre Version1.6.0 Updateupdate201
Oracle ≫ Jre Version1.7.0 Updateupdate191
Oracle ≫ Jre Version1.8.0 Updateupdate181
Oracle ≫ Jre Version11.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.47% 0.902
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

CWE-369 Divide By Zero

The product divides a value by zero.

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
Patch
Vendor Advisory
https://usn.ubuntu.com/3712-1/
Third Party Advisory
http://www.securityfocus.com/bid/105599
Third Party Advisory
Broken Link
VDB Entry
http://www.securitytracker.com/id/1041889
Third Party Advisory
Broken Link
VDB Entry
https://access.redhat.com/errata/RHSA-2018:3000
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3001
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3002
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3003
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3007
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3008
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3533
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3534
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3671
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3672
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3779
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3852
Third Party Advisory
https://github.com/glennrp/libpng/commit/8a05766cb74af05c04c53e6c9d60c13fc4d59bf2
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201908-10
Third Party Advisory
https://security.netapp.com/advisory/ntap-20181018-0001/
Third Party Advisory
https://sourceforge.net/p/libpng/bugs/278/
Third Party Advisory