CVE-2017-12652
Fixed in a distro release EPSS 4%CVSS 9.8
libpng before 1.6.32 does not properly check the length of chunks against the user limit.
Products: libpng, netapp active_iq_unified_manager
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | libpng | 2:1.5.13-8.amzn2 |
| Amazon Linux 2 | libpng-devel | 2:1.5.13-8.amzn2 |
| Amazon Linux 2 | libpng-static | 2:1.5.13-8.amzn2 |
| Debian 12 | libpng1.6 | 1.6.32-1 |
| Debian 13 | libpng1.6 | 1.6.32-1 |
| Debian 14 | libpng1.6 | 1.6.32-1 |
| Red Hat Enterprise Linux 7 | libpng | 2:1.5.13-8.el7 |
| Red Hat Enterprise Linux 7 | libpng-debuginfo | 2:1.5.13-8.el7 |
| Red Hat Enterprise Linux 7 | libpng-devel | 2:1.5.13-8.el7 |
| Red Hat Enterprise Linux 7 | libpng-static | 2:1.5.13-8.el7 |
| SUSE Enterprise Storage 5 | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server 12 SP4 | libpng12 | 1.2.50-20.3.2 |
| SUSE Linux Enterprise Server 12 SP5 | libpng12 | 1.2.50-20.3.2 |
| SUSE Linux Enterprise Server 12 SP5 | libpng15 | 1.5.22-10.4.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libpng16 | 1.6.8-15.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | libpng12 | 1.2.50-20.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | libpng12 | 1.2.50-20.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | libpng15 | 1.5.22-10.4.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | libpng12 | 1.2.50-20.3.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | libpng12 | 1.2.50-20.3.2 |
| SUSE OpenStack Cloud 7 | libpng16 | 1.6.8-15.5.2 |
| SUSE OpenStack Cloud 8 | libpng16 | 1.6.8-15.5.2 |
| Ubuntu Pro 14.04 LTS | libpng | no fix |
| Ubuntu Pro 16.04 LTS | libpng | 1.2.54-1ubuntu1.1+esm1 |
| Ubuntu Pro 16.04 LTS | libpng1.6 | 1.6.20-2ubuntu0.1~esm1 |
| openSUSE Tumbleweed | libpng16 | 1.6.37-3.3 |