Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-8126

Fixed in a distro release EPSS 10%

Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.

Published 2015-11-13 · CVE record · OSV

Products: libpng, fedoraproject fedora, opensuse leap, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, debian_linux, redhat satellite, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, oracle jdk, oracle jre, oracle linux, oracle solaris, apple mac_os_x, canonical ubuntu_linux

Distro releases

ReleasePackageFixed in
Debian 6.0libpng1.2.44-1+squeeze5
Debian 6.0openjdk-66b38-1.13.10-1~deb6u1
Debian 7libpng1.2.49-1+deb7u1
Debian 8chromium-browser49.0.2623.75-1~deb8u1
Debian 8libpng1.2.50-2+deb8u1
Red Hat Enterprise Linux 6libpng2:1.2.49-2.el6_7
Red Hat Enterprise Linux 6libpng-debuginfo2:1.2.49-2.el6_7
Red Hat Enterprise Linux 6libpng-devel2:1.2.49-2.el6_7
Red Hat Enterprise Linux 6libpng-static2:1.2.49-2.el6_7
Red Hat Enterprise Linux 7libpng2:1.5.13-7.el7_2
Red Hat Enterprise Linux 7libpng-debuginfo2:1.5.13-7.el7_2
Red Hat Enterprise Linux 7libpng-devel2:1.5.13-7.el7_2
Red Hat Enterprise Linux 7libpng-static2:1.5.13-7.el7_2
Red Hat Enterprise Linux 7libpng120:1.2.50-7.el7_2
Red Hat Enterprise Linux 7libpng12-debuginfo0:1.2.50-7.el7_2
Red Hat Enterprise Linux 7libpng12-devel0:1.2.50-7.el7_2
Red Hat network satellite 5.6java-1.7.0-ibm1:1.7.0.9.40-1jpp.1.el5
Red Hat network satellite 5.6java-1.7.0-ibm-devel1:1.7.0.9.40-1jpp.1.el5
Red Hat network satellite 5.6java-1.7.1-ibm1:1.7.1.3.40-1jpp.1.el6_7
Red Hat network satellite 5.6java-1.7.1-ibm-devel1:1.7.1.3.40-1jpp.1.el6_7
Red Hat network satellite 5.6spacewalk-java0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-java-config0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java-config0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-java-lib0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-java-lib0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java-oracle0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java-oracle0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-java-postgresql0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java-postgresql0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-taskomatic0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-taskomatic0:2.0.2-109.el6sat
Red Hat network satellite 5.7java-1.7.1-ibm1:1.7.1.3.40-1jpp.1.el6_7
Red Hat network satellite 5.7java-1.7.1-ibm-devel1:1.7.1.3.40-1jpp.1.el6_7
Red Hat network satellite 5.7spacewalk-java0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-java-config0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-java-lib0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-java-oracle0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-java-postgresql0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-taskomatic0:2.3.8-146.el6sat
Red Hat rhel extras 5java-1.6.0-ibm1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-accessibility1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-demo1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-devel1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-javacomm1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-jdbc1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-plugin1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-src1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm1:1.7.0.9.30-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-demo1:1.7.0.9.30-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-devel1:1.7.0.9.30-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-jdbc1:1.7.0.9.30-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-plugin1:1.7.0.9.30-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-src1:1.7.0.9.30-1jpp.1.el5
Red Hat rhel extras 6java-1.6.0-ibm1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-demo1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-devel1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-javacomm1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-jdbc1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-plugin1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-src1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.7.1-ibm1:1.7.1.3.30-1jpp.2.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-demo1:1.7.1.3.30-1jpp.2.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-devel1:1.7.1.3.30-1jpp.2.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-jdbc1:1.7.1.3.30-1jpp.2.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-plugin1:1.7.1.3.30-1jpp.2.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-src1:1.7.1.3.30-1jpp.2.el6_7
Red Hat rhel extras 7java-1.7.1-ibm1:1.7.1.3.30-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-demo1:1.7.1.3.30-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-devel1:1.7.1.3.30-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-jdbc1:1.7.1.3.30-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-plugin1:1.7.1.3.30-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-src1:1.7.1.3.30-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm1:1.8.0.2.10-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-demo1:1.8.0.2.10-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-devel1:1.8.0.2.10-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-jdbc1:1.8.0.2.10-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-plugin1:1.8.0.2.10-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-src1:1.8.0.2.10-1jpp.1.el7
Red Hat rhel extras oracle java 5java-1.6.0-sun1:1.6.0.111-1jpp.3.el5_11
Red Hat rhel extras oracle java 5java-1.6.0-sun-demo1:1.6.0.111-1jpp.3.el5_11
Red Hat rhel extras oracle java 5java-1.6.0-sun-devel1:1.6.0.111-1jpp.3.el5_11
Red Hat rhel extras oracle java 5java-1.6.0-sun-jdbc1:1.6.0.111-1jpp.3.el5_11
Red Hat rhel extras oracle java 5java-1.6.0-sun-plugin1:1.6.0.111-1jpp.3.el5_11
Red Hat rhel extras oracle java 5java-1.6.0-sun-src1:1.6.0.111-1jpp.3.el5_11
Red Hat rhel extras oracle java 5java-1.7.0-oracle1:1.7.0.95-1jpp.1.el5_11
Red Hat rhel extras oracle java 5java-1.7.0-oracle-devel1:1.7.0.95-1jpp.1.el5_11
Red Hat rhel extras oracle java 5java-1.7.0-oracle-javafx1:1.7.0.95-1jpp.1.el5_11
Red Hat rhel extras oracle java 5java-1.7.0-oracle-jdbc1:1.7.0.95-1jpp.1.el5_11
Red Hat rhel extras oracle java 5java-1.7.0-oracle-plugin1:1.7.0.95-1jpp.1.el5_11
Red Hat rhel extras oracle java 5java-1.7.0-oracle-src1:1.7.0.95-1jpp.1.el5_11
Red Hat rhel extras oracle java 6java-1.6.0-sun1:1.6.0.111-1jpp.3.el6_7
Red Hat rhel extras oracle java 6java-1.6.0-sun-demo1:1.6.0.111-1jpp.3.el6_7
Red Hat rhel extras oracle java 6java-1.6.0-sun-devel1:1.6.0.111-1jpp.3.el6_7
Red Hat rhel extras oracle java 6java-1.6.0-sun-jdbc1:1.6.0.111-1jpp.3.el6_7
Red Hat rhel extras oracle java 6java-1.6.0-sun-plugin1:1.6.0.111-1jpp.3.el6_7
Red Hat rhel extras oracle java 6java-1.6.0-sun-src1:1.6.0.111-1jpp.3.el6_7
Red Hat rhel extras oracle java 6java-1.7.0-oracle1:1.7.0.95-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.7.0-oracle-devel1:1.7.0.95-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.7.0-oracle-javafx1:1.7.0.95-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.7.0-oracle-jdbc1:1.7.0.95-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.7.0-oracle-plugin1:1.7.0.95-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.7.0-oracle-src1:1.7.0.95-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.8.0-oracle1:1.8.0.71-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.8.0-oracle-devel1:1.8.0.71-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.8.0-oracle-javafx1:1.8.0.71-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.8.0-oracle-jdbc1:1.8.0.71-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.8.0-oracle-plugin1:1.8.0.71-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.8.0-oracle-src1:1.8.0.71-1jpp.1.el6_7
Red Hat rhel extras oracle java 7java-1.6.0-sun1:1.6.0.111-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-demo1:1.6.0.111-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-devel1:1.6.0.111-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-jdbc1:1.6.0.111-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-plugin1:1.6.0.111-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-src1:1.6.0.111-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle1:1.7.0.95-1jpp.2.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-devel1:1.7.0.95-1jpp.2.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-javafx1:1.7.0.95-1jpp.2.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-jdbc1:1.7.0.95-1jpp.2.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-plugin1:1.7.0.95-1jpp.2.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-src1:1.7.0.95-1jpp.2.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle1:1.8.0.71-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-devel1:1.8.0.71-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-javafx1:1.8.0.71-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-jdbc1:1.8.0.71-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-plugin1:1.8.0.71-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-src1:1.8.0.71-1jpp.1.el7
SUSE Linux Enterprise Desktop 11 SP3java-1_7_0-openjdk1.7.0.95-0.17.2
SUSE Linux Enterprise Desktop 11 SP3libpng12-01.2.31-5.38.1
SUSE Linux Enterprise Desktop 11 SP3libpng12-01.2.31-5.35.1
SUSE Linux Enterprise Desktop 11 SP4java-1_7_0-openjdk1.7.0.95-0.17.2
SUSE Linux Enterprise Desktop 11 SP4libpng12-01.2.31-5.38.1
SUSE Linux Enterprise Desktop 11 SP4libpng12-01.2.31-5.35.1
SUSE Linux Enterprise Desktop 12java-1_7_0-openjdk1.7.0.95-24.2
SUSE Linux Enterprise Desktop 12libpng121.2.50-13.1
SUSE Linux Enterprise Desktop 12libpng121.2.50-10.1
SUSE Linux Enterprise Desktop 12libpng161.6.8-8.1
SUSE Linux Enterprise Desktop 12libpng161.6.8-11.1
SUSE Linux Enterprise Desktop 12 SP1java-1_7_0-openjdk1.7.0.95-24.2
SUSE Linux Enterprise Desktop 12 SP1java-1_8_0-openjdk1.8.0.72-3.2
SUSE Linux Enterprise Desktop 12 SP1libpng121.2.50-13.1
SUSE Linux Enterprise Desktop 12 SP1libpng151.5.22-4.1
SUSE Linux Enterprise Desktop 12 SP1libpng161.6.8-11.1
SUSE Linux Enterprise Module for Legacy 12java-1_6_0-ibm1.6.0_sr16.20-30.1
SUSE Linux Enterprise Server 11 SP2-LTSSjava-1_6_0-ibm1.6.0_sr16.20-49.1
SUSE Linux Enterprise Server 11 SP2-LTSSjava-1_7_0-ibm1.7.0_sr9.30-45.1
SUSE Linux Enterprise Server 11 SP3libpng12-01.2.31-5.35.1
SUSE Linux Enterprise Server 11 SP3libpng12-01.2.31-5.38.1
SUSE Linux Enterprise Server 11 SP3-LTSSjava-1_6_0-ibm1.6.0_sr16.20-51.1
SUSE Linux Enterprise Server 11 SP3-LTSSjava-1_7_0-ibm1.7.0_sr9.30-47.1
SUSE Linux Enterprise Server 11 SP3-TERADATAlibpng12-01.2.31-5.35.1
SUSE Linux Enterprise Server 11 SP3-TERADATAlibpng12-01.2.31-5.38.1
SUSE Linux Enterprise Server 11 SP4java-1_7_1-ibm1.7.1_sr3.30-9.1
SUSE Linux Enterprise Server 11 SP4libpng12-01.2.31-5.38.1
SUSE Linux Enterprise Server 11 SP4libpng12-01.2.31-5.35.1
SUSE Linux Enterprise Server 12java-1_7_0-openjdk1.7.0.95-24.2
SUSE Linux Enterprise Server 12java-1_7_1-ibm1.7.1_sr3.30-21.1
SUSE Linux Enterprise Server 12libpng121.2.50-10.1
SUSE Linux Enterprise Server 12libpng121.2.50-13.1
SUSE Linux Enterprise Server 12libpng161.6.8-8.1
SUSE Linux Enterprise Server 12libpng161.6.8-11.1
SUSE Linux Enterprise Server 12 SP1java-1_7_0-openjdk1.7.0.95-24.2
SUSE Linux Enterprise Server 12 SP1java-1_7_1-ibm1.7.1_sr3.30-21.1
SUSE Linux Enterprise Server 12 SP1java-1_8_0-ibm1.8.0_sr2.10-7.1
SUSE Linux Enterprise Server 12 SP1java-1_8_0-openjdk1.8.0.72-3.2
SUSE Linux Enterprise Server 12 SP1libpng121.2.50-13.1
SUSE Linux Enterprise Server 12 SP1libpng151.5.22-4.1
SUSE Linux Enterprise Server 12 SP1libpng161.6.8-11.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3libpng12-01.2.31-5.35.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3libpng12-01.2.31-5.38.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4java-1_7_1-ibm1.7.1_sr3.30-9.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4libpng12-01.2.31-5.38.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4libpng12-01.2.31-5.35.1
SUSE Linux Enterprise Server for SAP Applications 12java-1_7_0-openjdk1.7.0.95-24.2
SUSE Linux Enterprise Server for SAP Applications 12java-1_7_1-ibm1.7.1_sr3.30-21.1
SUSE Linux Enterprise Server for SAP Applications 12libpng121.2.50-13.1
SUSE Linux Enterprise Server for SAP Applications 12libpng121.2.50-10.1
SUSE Linux Enterprise Server for SAP Applications 12libpng161.6.8-11.1
SUSE Linux Enterprise Server for SAP Applications 12libpng161.6.8-8.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_7_0-openjdk1.7.0.95-24.2
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_7_1-ibm1.7.1_sr3.30-21.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_8_0-ibm1.8.0_sr2.10-7.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_8_0-openjdk1.8.0.72-3.2
SUSE Linux Enterprise Server for SAP Applications 12 SP1libpng121.2.50-13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1libpng151.5.22-4.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1libpng161.6.8-11.1
SUSE Linux Enterprise Software Development Kit 11 SP3libpng12-01.2.31-5.38.1
SUSE Linux Enterprise Software Development Kit 11 SP3libpng12-01.2.31-5.35.1
SUSE Linux Enterprise Software Development Kit 11 SP4java-1_7_1-ibm1.7.1_sr3.30-9.1
SUSE Linux Enterprise Software Development Kit 11 SP4libpng12-01.2.31-5.38.1
SUSE Linux Enterprise Software Development Kit 11 SP4libpng12-01.2.31-5.35.1
SUSE Linux Enterprise Software Development Kit 12java-1_7_1-ibm1.7.1_sr3.30-21.1
SUSE Linux Enterprise Software Development Kit 12libpng121.2.50-10.1
SUSE Linux Enterprise Software Development Kit 12libpng121.2.50-13.1
SUSE Linux Enterprise Software Development Kit 12libpng161.6.8-11.1
SUSE Linux Enterprise Software Development Kit 12libpng161.6.8-8.1
SUSE Linux Enterprise Software Development Kit 12 SP1java-1_7_1-ibm1.7.1_sr3.30-21.1
SUSE Linux Enterprise Software Development Kit 12 SP1java-1_8_0-ibm1.8.0_sr2.10-7.1
SUSE Linux Enterprise Software Development Kit 12 SP1libpng121.2.50-13.1
SUSE Linux Enterprise Software Development Kit 12 SP1libpng161.6.8-11.1
Ubuntu 14.04 LTSlibpng1.2.50-1ubuntu2.14.04.1
openSUSE Tumbleweedchromium55.0.2883.75-3.1
openSUSE Tumbleweedchromium113.0.5672.92-1.1
openSUSE Tumbleweedjava-1_7_0-openjdk1.7.0.121-1.1
openSUSE Tumbleweedjava-1_8_0-openjdk1.8.0.111-1.1
openSUSE Tumbleweedlibpng161.6.26-1.1
openSUSE Tumbleweedvlc2.2.4-11.1