Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-8472

Fixed in a distro release EPSS 6%

Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126.

Published 2016-01-21 · CVE record · OSV

Products: apple mac_os_x, libpng

Distro releases

ReleasePackageFixed in
Debian 12libpng1.61.6.20-1
Debian 13libpng1.61.6.20-1
Debian 14libpng1.61.6.20-1
Debian 6.0libpng1.2.44-1+squeeze6
Debian 6.0openjdk-66b38-1.13.10-1~deb6u1
Debian 7libpng1.2.49-1+deb7u2
Debian 8libpng1.2.50-2+deb8u2
Red Hat Enterprise Linux 6libpng2:1.2.49-2.el6_7
Red Hat Enterprise Linux 6libpng-debuginfo2:1.2.49-2.el6_7
Red Hat Enterprise Linux 6libpng-devel2:1.2.49-2.el6_7
Red Hat Enterprise Linux 6libpng-static2:1.2.49-2.el6_7
Red Hat Enterprise Linux 7libpng2:1.5.13-7.el7_2
Red Hat Enterprise Linux 7libpng-debuginfo2:1.5.13-7.el7_2
Red Hat Enterprise Linux 7libpng-devel2:1.5.13-7.el7_2
Red Hat Enterprise Linux 7libpng-static2:1.5.13-7.el7_2
Red Hat Enterprise Linux 7libpng120:1.2.50-7.el7_2
Red Hat Enterprise Linux 7libpng12-debuginfo0:1.2.50-7.el7_2
Red Hat Enterprise Linux 7libpng12-devel0:1.2.50-7.el7_2
Red Hat network satellite 5.6java-1.7.0-ibm1:1.7.0.9.40-1jpp.1.el5
Red Hat network satellite 5.6java-1.7.0-ibm-devel1:1.7.0.9.40-1jpp.1.el5
Red Hat network satellite 5.6java-1.7.1-ibm1:1.7.1.3.40-1jpp.1.el6_7
Red Hat network satellite 5.6java-1.7.1-ibm-devel1:1.7.1.3.40-1jpp.1.el6_7
Red Hat network satellite 5.6spacewalk-java0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-java-config0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-java-config0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java-lib0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java-lib0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-java-oracle0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java-oracle0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-java-postgresql0:2.0.2-109.el5sat
Red Hat network satellite 5.6spacewalk-java-postgresql0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-taskomatic0:2.0.2-109.el6sat
Red Hat network satellite 5.6spacewalk-taskomatic0:2.0.2-109.el5sat
Red Hat network satellite 5.7java-1.7.1-ibm1:1.7.1.3.40-1jpp.1.el6_7
Red Hat network satellite 5.7java-1.7.1-ibm-devel1:1.7.1.3.40-1jpp.1.el6_7
Red Hat network satellite 5.7spacewalk-java0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-java-config0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-java-lib0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-java-oracle0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-java-postgresql0:2.3.8-146.el6sat
Red Hat network satellite 5.7spacewalk-taskomatic0:2.3.8-146.el6sat
Red Hat rhel extras 5java-1.6.0-ibm1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-accessibility1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-demo1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-devel1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-javacomm1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-jdbc1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-plugin1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-src1:1.6.0.16.20-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm1:1.7.0.9.30-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-demo1:1.7.0.9.30-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-devel1:1.7.0.9.30-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-jdbc1:1.7.0.9.30-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-plugin1:1.7.0.9.30-1jpp.1.el5
Red Hat rhel extras 5java-1.7.0-ibm-src1:1.7.0.9.30-1jpp.1.el5
Red Hat rhel extras 6java-1.6.0-ibm1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-demo1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-devel1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-javacomm1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-jdbc1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-plugin1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.6.0-ibm-src1:1.6.0.16.20-1jpp.1.el6_7
Red Hat rhel extras 6java-1.7.1-ibm1:1.7.1.3.30-1jpp.2.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-demo1:1.7.1.3.30-1jpp.2.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-devel1:1.7.1.3.30-1jpp.2.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-jdbc1:1.7.1.3.30-1jpp.2.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-plugin1:1.7.1.3.30-1jpp.2.el6_7
Red Hat rhel extras 6java-1.7.1-ibm-src1:1.7.1.3.30-1jpp.2.el6_7
Red Hat rhel extras 7java-1.7.1-ibm1:1.7.1.3.30-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-demo1:1.7.1.3.30-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-devel1:1.7.1.3.30-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-jdbc1:1.7.1.3.30-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-plugin1:1.7.1.3.30-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-src1:1.7.1.3.30-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm1:1.8.0.2.10-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-demo1:1.8.0.2.10-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-devel1:1.8.0.2.10-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-jdbc1:1.8.0.2.10-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-plugin1:1.8.0.2.10-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-src1:1.8.0.2.10-1jpp.1.el7
Red Hat rhel extras oracle java 5java-1.6.0-sun1:1.6.0.111-1jpp.3.el5_11
Red Hat rhel extras oracle java 5java-1.6.0-sun-demo1:1.6.0.111-1jpp.3.el5_11
Red Hat rhel extras oracle java 5java-1.6.0-sun-devel1:1.6.0.111-1jpp.3.el5_11
Red Hat rhel extras oracle java 5java-1.6.0-sun-jdbc1:1.6.0.111-1jpp.3.el5_11
Red Hat rhel extras oracle java 5java-1.6.0-sun-plugin1:1.6.0.111-1jpp.3.el5_11
Red Hat rhel extras oracle java 5java-1.6.0-sun-src1:1.6.0.111-1jpp.3.el5_11
Red Hat rhel extras oracle java 5java-1.7.0-oracle1:1.7.0.95-1jpp.1.el5_11
Red Hat rhel extras oracle java 5java-1.7.0-oracle-devel1:1.7.0.95-1jpp.1.el5_11
Red Hat rhel extras oracle java 5java-1.7.0-oracle-javafx1:1.7.0.95-1jpp.1.el5_11
Red Hat rhel extras oracle java 5java-1.7.0-oracle-jdbc1:1.7.0.95-1jpp.1.el5_11
Red Hat rhel extras oracle java 5java-1.7.0-oracle-plugin1:1.7.0.95-1jpp.1.el5_11
Red Hat rhel extras oracle java 5java-1.7.0-oracle-src1:1.7.0.95-1jpp.1.el5_11
Red Hat rhel extras oracle java 6java-1.6.0-sun1:1.6.0.111-1jpp.3.el6_7
Red Hat rhel extras oracle java 6java-1.6.0-sun-demo1:1.6.0.111-1jpp.3.el6_7
Red Hat rhel extras oracle java 6java-1.6.0-sun-devel1:1.6.0.111-1jpp.3.el6_7
Red Hat rhel extras oracle java 6java-1.6.0-sun-jdbc1:1.6.0.111-1jpp.3.el6_7
Red Hat rhel extras oracle java 6java-1.6.0-sun-plugin1:1.6.0.111-1jpp.3.el6_7
Red Hat rhel extras oracle java 6java-1.6.0-sun-src1:1.6.0.111-1jpp.3.el6_7
Red Hat rhel extras oracle java 6java-1.7.0-oracle1:1.7.0.95-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.7.0-oracle-devel1:1.7.0.95-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.7.0-oracle-javafx1:1.7.0.95-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.7.0-oracle-jdbc1:1.7.0.95-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.7.0-oracle-plugin1:1.7.0.95-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.7.0-oracle-src1:1.7.0.95-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.8.0-oracle1:1.8.0.71-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.8.0-oracle-devel1:1.8.0.71-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.8.0-oracle-javafx1:1.8.0.71-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.8.0-oracle-jdbc1:1.8.0.71-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.8.0-oracle-plugin1:1.8.0.71-1jpp.1.el6_7
Red Hat rhel extras oracle java 6java-1.8.0-oracle-src1:1.8.0.71-1jpp.1.el6_7
Red Hat rhel extras oracle java 7java-1.6.0-sun1:1.6.0.111-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-demo1:1.6.0.111-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-devel1:1.6.0.111-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-jdbc1:1.6.0.111-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-plugin1:1.6.0.111-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-src1:1.6.0.111-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle1:1.7.0.95-1jpp.2.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-devel1:1.7.0.95-1jpp.2.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-javafx1:1.7.0.95-1jpp.2.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-jdbc1:1.7.0.95-1jpp.2.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-plugin1:1.7.0.95-1jpp.2.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-src1:1.7.0.95-1jpp.2.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle1:1.8.0.71-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-devel1:1.8.0.71-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-javafx1:1.8.0.71-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-jdbc1:1.8.0.71-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-plugin1:1.8.0.71-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-src1:1.8.0.71-1jpp.1.el7
SUSE Linux Enterprise Desktop 11 SP3java-1_7_0-openjdk1.7.0.95-0.17.2
SUSE Linux Enterprise Desktop 11 SP4java-1_7_0-openjdk1.7.0.95-0.17.2
SUSE Linux Enterprise Desktop 12java-1_7_0-openjdk1.7.0.95-24.2
SUSE Linux Enterprise Desktop 12 SP1java-1_7_0-openjdk1.7.0.95-24.2
SUSE Linux Enterprise Module for Legacy 12java-1_6_0-ibm1.6.0_sr16.20-30.1
SUSE Linux Enterprise Server 11 SP2-LTSSjava-1_6_0-ibm1.6.0_sr16.20-49.1
SUSE Linux Enterprise Server 11 SP2-LTSSjava-1_7_0-ibm1.7.0_sr9.30-45.1
SUSE Linux Enterprise Server 11 SP3-LTSSjava-1_6_0-ibm1.6.0_sr16.20-51.1
SUSE Linux Enterprise Server 11 SP3-LTSSjava-1_7_0-ibm1.7.0_sr9.30-47.1
SUSE Linux Enterprise Server 11 SP4java-1_7_1-ibm1.7.1_sr3.30-9.1
SUSE Linux Enterprise Server 12java-1_7_0-openjdk1.7.0.95-24.2
SUSE Linux Enterprise Server 12java-1_7_1-ibm1.7.1_sr3.30-21.1
SUSE Linux Enterprise Server 12 SP1java-1_7_0-openjdk1.7.0.95-24.2
SUSE Linux Enterprise Server 12 SP1java-1_7_1-ibm1.7.1_sr3.30-21.1
SUSE Linux Enterprise Server 12 SP1java-1_8_0-ibm1.8.0_sr2.10-7.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4java-1_7_1-ibm1.7.1_sr3.30-9.1
SUSE Linux Enterprise Server for SAP Applications 12java-1_7_0-openjdk1.7.0.95-24.2
SUSE Linux Enterprise Server for SAP Applications 12java-1_7_1-ibm1.7.1_sr3.30-21.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_7_0-openjdk1.7.0.95-24.2
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_7_1-ibm1.7.1_sr3.30-21.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_8_0-ibm1.8.0_sr2.10-7.1
SUSE Linux Enterprise Software Development Kit 11 SP4java-1_7_1-ibm1.7.1_sr3.30-9.1
SUSE Linux Enterprise Software Development Kit 12java-1_7_1-ibm1.7.1_sr3.30-21.1
SUSE Linux Enterprise Software Development Kit 12 SP1java-1_7_1-ibm1.7.1_sr3.30-21.1
SUSE Linux Enterprise Software Development Kit 12 SP1java-1_8_0-ibm1.8.0_sr2.10-7.1
Ubuntu 14.04 LTSlibpng1.2.50-1ubuntu2.14.04.2
openSUSE Tumbleweedjava-1_7_0-openjdk1.7.0.121-1.1