CVE-2013-6954
Fixed in a distro release EPSS 5%CVSS 6.5
The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.
Products: libpng
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 7 | openjdk-7 | 7u55-2.4.7-1~deb7u1 |
| Red Hat network satellite 5.4 | java-1.6.0-ibm | 1:1.6.0.16.0-1jpp.1.el6 |
| Red Hat network satellite 5.4 | java-1.6.0-ibm | 1:1.6.0.16.0-1jpp.1.el5 |
| Red Hat network satellite 5.4 | java-1.6.0-ibm-devel | 1:1.6.0.16.0-1jpp.1.el6 |
| Red Hat network satellite 5.4 | java-1.6.0-ibm-devel | 1:1.6.0.16.0-1jpp.1.el5 |
| Red Hat network satellite 5.5 | java-1.6.0-ibm | 1:1.6.0.16.0-1jpp.1.el5 |
| Red Hat network satellite 5.5 | java-1.6.0-ibm | 1:1.6.0.16.0-1jpp.1.el6 |
| Red Hat network satellite 5.5 | java-1.6.0-ibm-devel | 1:1.6.0.16.0-1jpp.1.el6 |
| Red Hat network satellite 5.5 | java-1.6.0-ibm-devel | 1:1.6.0.16.0-1jpp.1.el5 |
| Red Hat network satellite 5.6 | java-1.6.0-ibm | 1:1.6.0.16.0-1jpp.1.el5 |
| Red Hat network satellite 5.6 | java-1.6.0-ibm | 1:1.6.0.16.0-1jpp.1.el6 |
| Red Hat network satellite 5.6 | java-1.6.0-ibm-devel | 1:1.6.0.16.0-1jpp.1.el6 |
| Red Hat network satellite 5.6 | java-1.6.0-ibm-devel | 1:1.6.0.16.0-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm | 1:1.6.0.16.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-accessibility | 1:1.6.0.16.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-demo | 1:1.6.0.16.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-devel | 1:1.6.0.16.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-javacomm | 1:1.6.0.16.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-jdbc | 1:1.6.0.16.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-plugin | 1:1.6.0.16.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-src | 1:1.6.0.16.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.7.0-ibm | 1:1.7.0.7.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-demo | 1:1.7.0.7.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-devel | 1:1.7.0.7.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-jdbc | 1:1.7.0.7.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-plugin | 1:1.7.0.7.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-src | 1:1.7.0.7.0-1jpp.1.el5_10 |
| Red Hat rhel extras 5 | java-1.7.0-oracle | 1:1.7.0.55-1jpp.2.el5_10 |
| Red Hat rhel extras 5 | java-1.7.0-oracle-devel | 1:1.7.0.55-1jpp.2.el5_10 |
| Red Hat rhel extras 5 | java-1.7.0-oracle-javafx | 1:1.7.0.55-1jpp.2.el5_10 |
| Red Hat rhel extras 5 | java-1.7.0-oracle-jdbc | 1:1.7.0.55-1jpp.2.el5_10 |
| Red Hat rhel extras 5 | java-1.7.0-oracle-plugin | 1:1.7.0.55-1jpp.2.el5_10 |
| Red Hat rhel extras 5 | java-1.7.0-oracle-src | 1:1.7.0.55-1jpp.2.el5_10 |
| Red Hat rhel extras 6 | java-1.6.0-ibm | 1:1.6.0.16.0-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-demo | 1:1.6.0.16.0-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-devel | 1:1.6.0.16.0-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-javacomm | 1:1.6.0.16.0-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-jdbc | 1:1.6.0.16.0-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-plugin | 1:1.6.0.16.0-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-src | 1:1.6.0.16.0-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.7.0-ibm | 1:1.7.0.7.0-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.7.0-ibm-demo | 1:1.7.0.7.0-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.7.0-ibm-devel | 1:1.7.0.7.0-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.7.0-ibm-jdbc | 1:1.7.0.7.0-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.7.0-ibm-plugin | 1:1.7.0.7.0-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.7.0-ibm-src | 1:1.7.0.7.0-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.7.0-oracle | 1:1.7.0.55-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.7.0-oracle-devel | 1:1.7.0.55-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.7.0-oracle-javafx | 1:1.7.0.55-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.7.0-oracle-jdbc | 1:1.7.0.55-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.7.0-oracle-plugin | 1:1.7.0.55-1jpp.1.el6_5 |
| Red Hat rhel extras 6 | java-1.7.0-oracle-src | 1:1.7.0.55-1jpp.1.el6_5 |
| Red Hat rhel extras 7 | java-1.7.1-ibm | 1:1.7.1.1.0-1jpp.2.el7_0 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-demo | 1:1.7.1.1.0-1jpp.2.el7_0 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-devel | 1:1.7.1.1.0-1jpp.2.el7_0 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-jdbc | 1:1.7.1.1.0-1jpp.2.el7_0 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-plugin | 1:1.7.1.1.0-1jpp.2.el7_0 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-src | 1:1.7.1.1.0-1jpp.2.el7_0 |
| Red Hat rhel extras oracle java 5 | java-1.6.0-sun | 1:1.6.0.75-1jpp.3.el5_10 |
| Red Hat rhel extras oracle java 5 | java-1.6.0-sun-demo | 1:1.6.0.75-1jpp.3.el5_10 |
| Red Hat rhel extras oracle java 5 | java-1.6.0-sun-devel | 1:1.6.0.75-1jpp.3.el5_10 |
| Red Hat rhel extras oracle java 5 | java-1.6.0-sun-jdbc | 1:1.6.0.75-1jpp.3.el5_10 |
| Red Hat rhel extras oracle java 5 | java-1.6.0-sun-plugin | 1:1.6.0.75-1jpp.3.el5_10 |
| Red Hat rhel extras oracle java 5 | java-1.6.0-sun-src | 1:1.6.0.75-1jpp.3.el5_10 |
| Red Hat rhel extras oracle java 5 | java-1.7.0-oracle | 1:1.7.0.55-1jpp.2.el5_10 |
| Red Hat rhel extras oracle java 5 | java-1.7.0-oracle-devel | 1:1.7.0.55-1jpp.2.el5_10 |
| Red Hat rhel extras oracle java 5 | java-1.7.0-oracle-javafx | 1:1.7.0.55-1jpp.2.el5_10 |
| Red Hat rhel extras oracle java 5 | java-1.7.0-oracle-jdbc | 1:1.7.0.55-1jpp.2.el5_10 |
| Red Hat rhel extras oracle java 5 | java-1.7.0-oracle-plugin | 1:1.7.0.55-1jpp.2.el5_10 |
| Red Hat rhel extras oracle java 5 | java-1.7.0-oracle-src | 1:1.7.0.55-1jpp.2.el5_10 |
| Red Hat rhel extras oracle java 6 | java-1.6.0-sun | 1:1.6.0.75-1jpp.1.el6_5 |
| Red Hat rhel extras oracle java 6 | java-1.6.0-sun-demo | 1:1.6.0.75-1jpp.1.el6_5 |
| Red Hat rhel extras oracle java 6 | java-1.6.0-sun-devel | 1:1.6.0.75-1jpp.1.el6_5 |
| Red Hat rhel extras oracle java 6 | java-1.6.0-sun-jdbc | 1:1.6.0.75-1jpp.1.el6_5 |
| Red Hat rhel extras oracle java 6 | java-1.6.0-sun-plugin | 1:1.6.0.75-1jpp.1.el6_5 |
| Red Hat rhel extras oracle java 6 | java-1.6.0-sun-src | 1:1.6.0.75-1jpp.1.el6_5 |
| Red Hat rhel extras oracle java 6 | java-1.7.0-oracle | 1:1.7.0.55-1jpp.1.el6_5 |
| Red Hat rhel extras oracle java 6 | java-1.7.0-oracle-devel | 1:1.7.0.55-1jpp.1.el6_5 |
| Red Hat rhel extras oracle java 6 | java-1.7.0-oracle-javafx | 1:1.7.0.55-1jpp.1.el6_5 |
| Red Hat rhel extras oracle java 6 | java-1.7.0-oracle-jdbc | 1:1.7.0.55-1jpp.1.el6_5 |
| Red Hat rhel extras oracle java 6 | java-1.7.0-oracle-plugin | 1:1.7.0.55-1jpp.1.el6_5 |
| Red Hat rhel extras oracle java 6 | java-1.7.0-oracle-src | 1:1.7.0.55-1jpp.1.el6_5 |
| openSUSE Tumbleweed | java-1_7_0-openjdk | 1.7.0.121-1.1 |
| openSUSE Tumbleweed | libpng16 | 1.6.26-1.1 |