Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-13785

Fixed in a distro release EPSS 4%CVSS 6.5

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

Published 2018-07-09 · CVE record · OSV

Products: libpng, canonical ubuntu_linux, oracle jdk, oracle jre, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation

Distro releases

ReleasePackageFixed in
Debian 12libpng1.61.6.34-2
Debian 13libpng1.61.6.34-2
Debian 14libpng1.61.6.34-2
Red Hat network satellite 5.6java-1.7.1-ibm1:1.7.1.4.35-1jpp.1.el6_10
Red Hat network satellite 5.6java-1.7.1-ibm-devel1:1.7.1.4.35-1jpp.1.el6_10
Red Hat network satellite 5.7java-1.7.1-ibm1:1.7.1.4.35-1jpp.1.el6_10
Red Hat network satellite 5.7java-1.7.1-ibm-devel1:1.7.1.4.35-1jpp.1.el6_10
Red Hat network satellite 5.8java-1.8.0-ibm1:1.8.0.5.25-1jpp.1.el6_10
Red Hat network satellite 5.8java-1.8.0-ibm-devel1:1.8.0.5.25-1jpp.1.el6_10
Red Hat rhel extras 6java-1.7.1-ibm1:1.7.1.4.35-1jpp.1.el6_10
Red Hat rhel extras 6java-1.7.1-ibm-demo1:1.7.1.4.35-1jpp.1.el6_10
Red Hat rhel extras 6java-1.7.1-ibm-devel1:1.7.1.4.35-1jpp.1.el6_10
Red Hat rhel extras 6java-1.7.1-ibm-jdbc1:1.7.1.4.35-1jpp.1.el6_10
Red Hat rhel extras 6java-1.7.1-ibm-plugin1:1.7.1.4.35-1jpp.1.el6_10
Red Hat rhel extras 6java-1.7.1-ibm-src1:1.7.1.4.35-1jpp.1.el6_10
Red Hat rhel extras 6java-1.8.0-ibm1:1.8.0.5.25-1jpp.1.el6_10
Red Hat rhel extras 6java-1.8.0-ibm-demo1:1.8.0.5.25-1jpp.1.el6_10
Red Hat rhel extras 6java-1.8.0-ibm-devel1:1.8.0.5.25-1jpp.1.el6_10
Red Hat rhel extras 6java-1.8.0-ibm-jdbc1:1.8.0.5.25-1jpp.1.el6_10
Red Hat rhel extras 6java-1.8.0-ibm-plugin1:1.8.0.5.25-1jpp.1.el6_10
Red Hat rhel extras 6java-1.8.0-ibm-src1:1.8.0.5.25-1jpp.1.el6_10
Red Hat rhel extras 7java-1.7.1-ibm1:1.7.1.4.35-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-demo1:1.7.1.4.35-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-devel1:1.7.1.4.35-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-jdbc1:1.7.1.4.35-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-plugin1:1.7.1.4.35-1jpp.1.el7
Red Hat rhel extras 7java-1.7.1-ibm-src1:1.7.1.4.35-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm1:1.8.0.5.25-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-demo1:1.8.0.5.25-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-devel1:1.8.0.5.25-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-jdbc1:1.8.0.5.25-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-plugin1:1.8.0.5.25-1jpp.1.el7
Red Hat rhel extras 7java-1.8.0-ibm-src1:1.8.0.5.25-1jpp.1.el7
Red Hat rhel extras oracle java 6java-1.6.0-sun1:1.6.0.211-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.6.0-sun-demo1:1.6.0.211-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.6.0-sun-devel1:1.6.0.211-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.6.0-sun-jdbc1:1.6.0.211-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.6.0-sun-plugin1:1.6.0.211-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.6.0-sun-src1:1.6.0.211-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.7.0-oracle1:1.7.0.201-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.7.0-oracle-devel1:1.7.0.201-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.7.0-oracle-javafx1:1.7.0.201-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.7.0-oracle-jdbc1:1.7.0.201-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.7.0-oracle-plugin1:1.7.0.201-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.7.0-oracle-src1:1.7.0.201-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.8.0-oracle1:1.8.0.191-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.8.0-oracle-devel1:1.8.0.191-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.8.0-oracle-javafx1:1.8.0.191-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.8.0-oracle-jdbc1:1.8.0.191-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.8.0-oracle-plugin1:1.8.0.191-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.8.0-oracle-src1:1.8.0.191-1jpp.1.el6
Red Hat rhel extras oracle java 7java-1.6.0-sun1:1.6.0.211-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-demo1:1.6.0.211-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-devel1:1.6.0.211-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-jdbc1:1.6.0.211-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-plugin1:1.6.0.211-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.6.0-sun-src1:1.6.0.211-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle1:1.7.0.201-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-devel1:1.7.0.201-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-javafx1:1.7.0.201-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-jdbc1:1.7.0.201-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-plugin1:1.7.0.201-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-src1:1.7.0.201-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle1:1.8.0.191-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-devel1:1.8.0.191-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-javafx1:1.8.0.191-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-jdbc1:1.8.0.191-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-plugin1:1.8.0.191-1jpp.1.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-src1:1.8.0.191-1jpp.1.el7
SUSE Enterprise Storage 4java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Enterprise Storage 4java-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE Enterprise Storage 4java-1_8_0-ibm1.8.0_sr5.25-30.39.1
SUSE Enterprise Storage 4java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Desktop 12 SP3java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Desktop 12 SP3java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Desktop 12 SP4java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Desktop 12 SP4java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Module for Basesystem 15libpng161.6.34-3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP1libpng161.6.34-3.9.1
SUSE Linux Enterprise Module for Legacy 15java-1_8_0-ibm1.8.0_sr5.25-3.9.1
SUSE Linux Enterprise Module for Legacy 15java-1_8_0-openjdk1.8.0.191-3.13.1
SUSE Linux Enterprise Module for Package Hub 15java-1_8_0-openjdk1.8.0.191-3.13.1
SUSE Linux Enterprise Point of Sale 11 SP3java-1_7_0-ibm1.7.0_sr10.35-65.31.1
SUSE Linux Enterprise Server 11 SP3-LTSSjava-1_7_0-ibm1.7.0_sr10.35-65.31.1
SUSE Linux Enterprise Server 11 SP3-TERADATAjava-1_7_0-ibm1.7.0_sr10.35-65.31.1
SUSE Linux Enterprise Server 11 SP4java-1_7_1-ibm1.7.1_sr4.35-26.32.1
SUSE Linux Enterprise Server 12 SP1-LTSSjava-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server 12 SP1-LTSSjava-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE Linux Enterprise Server 12 SP1-LTSSjava-1_8_0-ibm1.8.0_sr5.25-30.39.1
SUSE Linux Enterprise Server 12 SP1-LTSSjava-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server 12 SP2-BCLjava-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server 12 SP2-BCLjava-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE Linux Enterprise Server 12 SP2-BCLjava-1_8_0-ibm1.8.0_sr5.25-30.39.1
SUSE Linux Enterprise Server 12 SP2-BCLjava-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server 12 SP2-LTSSjava-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server 12 SP2-LTSSjava-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE Linux Enterprise Server 12 SP2-LTSSjava-1_8_0-ibm1.8.0_sr5.25-30.39.1
SUSE Linux Enterprise Server 12 SP2-LTSSjava-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server 12 SP3java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server 12 SP3java-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE Linux Enterprise Server 12 SP3java-1_8_0-ibm1.8.0_sr5.25-30.39.1
SUSE Linux Enterprise Server 12 SP3java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server 12 SP4java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server 12 SP4java-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE Linux Enterprise Server 12 SP4java-1_8_0-ibm1.8.0_sr5.25-30.39.1
SUSE Linux Enterprise Server 12 SP4java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server 12-LTSSjava-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server 12-LTSSjava-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4java-1_7_1-ibm1.7.1_sr4.35-26.32.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_8_0-ibm1.8.0_sr5.25-30.39.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2java-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2java-1_8_0-ibm1.8.0_sr5.25-30.39.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3java-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3java-1_8_0-ibm1.8.0_sr5.25-30.39.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4java-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4java-1_8_0-ibm1.8.0_sr5.25-30.39.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Software Development Kit 11 SP4java-1_7_1-ibm1.7.1_sr4.35-26.32.1
SUSE Linux Enterprise Software Development Kit 12 SP3java-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE Linux Enterprise Software Development Kit 12 SP3java-1_8_0-ibm1.8.0_sr5.25-30.39.1
SUSE Linux Enterprise Software Development Kit 12 SP4java-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE Linux Enterprise Software Development Kit 12 SP4java-1_8_0-ibm1.8.0_sr5.25-30.39.1
SUSE OpenStack Cloud 7java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE OpenStack Cloud 7java-1_7_1-ibm1.7.1_sr4.35-38.29.1
SUSE OpenStack Cloud 7java-1_8_0-ibm1.8.0_sr5.25-30.39.1
SUSE OpenStack Cloud 7java-1_8_0-openjdk1.8.0.191-27.29.1
Ubuntu 14.04 LTSlibpng1.2.50-1ubuntu2.14.04.3
Ubuntu 16.04 LTSlibpng1.2.54-1ubuntu1.1
Ubuntu 18.04 LTSlibpng1.61.6.34-1ubuntu0.18.04.1
openSUSE Leap 15.0java-1_8_0-openjdk1.8.0.191-lp150.2.9.2
openSUSE Leap 15.0libpng161.6.34-lp151.3.3.1
openSUSE Leap 15.1libpng161.6.34-lp151.3.3.1
openSUSE Tumbleweedjava-1_8_0-openjdk1.8.0.302-2.2
openSUSE Tumbleweedlibpng161.6.37-3.3