CVE-2015-7981
Fixed in a distro release EPSS 6%
The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.
Products: canonical ubuntu_linux, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_hpc_node_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation, libpng
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | libpng | 1.2.44-1+squeeze5 |
| Debian 7 | libpng | 1.2.49-1+deb7u1 |
| Debian 8 | libpng | 1.2.50-2+deb8u1 |
| Red Hat Enterprise Linux 6 | libpng | 2:1.2.49-2.el6_7 |
| Red Hat Enterprise Linux 6 | libpng-debuginfo | 2:1.2.49-2.el6_7 |
| Red Hat Enterprise Linux 6 | libpng-devel | 2:1.2.49-2.el6_7 |
| Red Hat Enterprise Linux 6 | libpng-static | 2:1.2.49-2.el6_7 |
| Red Hat Enterprise Linux 7 | libpng12 | 0:1.2.50-7.el7_2 |
| Red Hat Enterprise Linux 7 | libpng12-debuginfo | 0:1.2.50-7.el7_2 |
| Red Hat Enterprise Linux 7 | libpng12-devel | 0:1.2.50-7.el7_2 |
| Red Hat network satellite 5.6 | java-1.7.0-ibm | 1:1.7.0.9.40-1jpp.1.el5 |
| Red Hat network satellite 5.6 | java-1.7.0-ibm-devel | 1:1.7.0.9.40-1jpp.1.el5 |
| Red Hat network satellite 5.6 | java-1.7.1-ibm | 1:1.7.1.3.40-1jpp.1.el6_7 |
| Red Hat network satellite 5.6 | java-1.7.1-ibm-devel | 1:1.7.1.3.40-1jpp.1.el6_7 |
| Red Hat network satellite 5.6 | spacewalk-java | 0:2.0.2-109.el5sat |
| Red Hat network satellite 5.6 | spacewalk-java | 0:2.0.2-109.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java-config | 0:2.0.2-109.el5sat |
| Red Hat network satellite 5.6 | spacewalk-java-config | 0:2.0.2-109.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java-lib | 0:2.0.2-109.el5sat |
| Red Hat network satellite 5.6 | spacewalk-java-lib | 0:2.0.2-109.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java-oracle | 0:2.0.2-109.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java-oracle | 0:2.0.2-109.el5sat |
| Red Hat network satellite 5.6 | spacewalk-java-postgresql | 0:2.0.2-109.el6sat |
| Red Hat network satellite 5.6 | spacewalk-java-postgresql | 0:2.0.2-109.el5sat |
| Red Hat network satellite 5.6 | spacewalk-taskomatic | 0:2.0.2-109.el6sat |
| Red Hat network satellite 5.6 | spacewalk-taskomatic | 0:2.0.2-109.el5sat |
| Red Hat network satellite 5.7 | java-1.7.1-ibm | 1:1.7.1.3.40-1jpp.1.el6_7 |
| Red Hat network satellite 5.7 | java-1.7.1-ibm-devel | 1:1.7.1.3.40-1jpp.1.el6_7 |
| Red Hat network satellite 5.7 | spacewalk-java | 0:2.3.8-146.el6sat |
| Red Hat network satellite 5.7 | spacewalk-java-config | 0:2.3.8-146.el6sat |
| Red Hat network satellite 5.7 | spacewalk-java-lib | 0:2.3.8-146.el6sat |
| Red Hat network satellite 5.7 | spacewalk-java-oracle | 0:2.3.8-146.el6sat |
| Red Hat network satellite 5.7 | spacewalk-java-postgresql | 0:2.3.8-146.el6sat |
| Red Hat network satellite 5.7 | spacewalk-taskomatic | 0:2.3.8-146.el6sat |
| Red Hat rhel extras 5 | java-1.6.0-ibm | 1:1.6.0.16.20-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-accessibility | 1:1.6.0.16.20-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-demo | 1:1.6.0.16.20-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-devel | 1:1.6.0.16.20-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-javacomm | 1:1.6.0.16.20-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-jdbc | 1:1.6.0.16.20-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-plugin | 1:1.6.0.16.20-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.6.0-ibm-src | 1:1.6.0.16.20-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.7.0-ibm | 1:1.7.0.9.30-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-demo | 1:1.7.0.9.30-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-devel | 1:1.7.0.9.30-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-jdbc | 1:1.7.0.9.30-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-plugin | 1:1.7.0.9.30-1jpp.1.el5 |
| Red Hat rhel extras 5 | java-1.7.0-ibm-src | 1:1.7.0.9.30-1jpp.1.el5 |
| Red Hat rhel extras 6 | java-1.6.0-ibm | 1:1.6.0.16.20-1jpp.1.el6_7 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-demo | 1:1.6.0.16.20-1jpp.1.el6_7 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-devel | 1:1.6.0.16.20-1jpp.1.el6_7 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-javacomm | 1:1.6.0.16.20-1jpp.1.el6_7 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-jdbc | 1:1.6.0.16.20-1jpp.1.el6_7 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-plugin | 1:1.6.0.16.20-1jpp.1.el6_7 |
| Red Hat rhel extras 6 | java-1.6.0-ibm-src | 1:1.6.0.16.20-1jpp.1.el6_7 |
| Red Hat rhel extras 6 | java-1.7.1-ibm | 1:1.7.1.3.30-1jpp.2.el6_7 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-demo | 1:1.7.1.3.30-1jpp.2.el6_7 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-devel | 1:1.7.1.3.30-1jpp.2.el6_7 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-jdbc | 1:1.7.1.3.30-1jpp.2.el6_7 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-plugin | 1:1.7.1.3.30-1jpp.2.el6_7 |
| Red Hat rhel extras 6 | java-1.7.1-ibm-src | 1:1.7.1.3.30-1jpp.2.el6_7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm | 1:1.7.1.3.30-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-demo | 1:1.7.1.3.30-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-devel | 1:1.7.1.3.30-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-jdbc | 1:1.7.1.3.30-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-plugin | 1:1.7.1.3.30-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.7.1-ibm-src | 1:1.7.1.3.30-1jpp.1.el7 |
| SUSE Linux Enterprise Desktop 11 SP3 | libpng12-0 | 1.2.31-5.35.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | libpng12-0 | 1.2.31-5.35.1 |
| SUSE Linux Enterprise Desktop 12 | libpng12 | 1.2.50-10.1 |
| SUSE Linux Enterprise Module for Legacy 12 | java-1_6_0-ibm | 1.6.0_sr16.20-30.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | java-1_6_0-ibm | 1.6.0_sr16.20-49.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | java-1_7_0-ibm | 1.7.0_sr9.30-45.1 |
| SUSE Linux Enterprise Server 11 SP3 | libpng12-0 | 1.2.31-5.35.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | java-1_6_0-ibm | 1.6.0_sr16.20-51.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | java-1_7_0-ibm | 1.7.0_sr9.30-47.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | libpng12-0 | 1.2.31-5.35.1 |
| SUSE Linux Enterprise Server 11 SP4 | java-1_7_1-ibm | 1.7.1_sr3.30-9.1 |
| SUSE Linux Enterprise Server 11 SP4 | libpng12-0 | 1.2.31-5.35.1 |
| SUSE Linux Enterprise Server 12 | java-1_7_1-ibm | 1.7.1_sr3.30-21.1 |
| SUSE Linux Enterprise Server 12 | libpng12 | 1.2.50-10.1 |
| SUSE Linux Enterprise Server 12 SP1 | java-1_7_1-ibm | 1.7.1_sr3.30-21.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | libpng12-0 | 1.2.31-5.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | java-1_7_1-ibm | 1.7.1_sr3.30-9.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libpng12-0 | 1.2.31-5.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | java-1_7_1-ibm | 1.7.1_sr3.30-21.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libpng12 | 1.2.50-10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | java-1_7_1-ibm | 1.7.1_sr3.30-21.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | libpng12-0 | 1.2.31-5.35.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | java-1_7_1-ibm | 1.7.1_sr3.30-9.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libpng12-0 | 1.2.31-5.35.1 |
| SUSE Linux Enterprise Software Development Kit 12 | java-1_7_1-ibm | 1.7.1_sr3.30-21.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libpng12 | 1.2.50-10.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | java-1_7_1-ibm | 1.7.1_sr3.30-21.1 |
| Ubuntu 14.04 LTS | libpng | 1.2.50-1ubuntu2.14.04.1 |
| openSUSE Tumbleweed | vlc | 2.2.4-11.1 |