CVE-2018-14550
Fixed in a distro release EPSS 4%
An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.
Products: libpng, oracle hyperion_infrastructure_technology, oracle mysql_workbench, netapp active_iq_unified_manager, netapp oncommand_api_services
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| NuGet | libpng | 1.6.37 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | libpng | 1.6.37-r0 |
| Alpine 3.11 | libpng | 1.6.37-r0 |
| Alpine 3.12 | libpng | 1.6.37-r0 |
| Alpine 3.13 | libpng | 1.6.37-r0 |
| Alpine 3.14 | libpng | 1.6.37-r0 |
| Alpine 3.15 | libpng | 1.6.37-r0 |
| Alpine 3.16 | libpng | 1.6.37-r0 |
| Alpine 3.17 | libpng | 1.6.37-r0 |
| Alpine 3.18 | libpng | 1.6.37-r0 |
| Alpine 3.19 | libpng | 1.6.37-r0 |
| Alpine 3.20 | libpng | 1.6.37-r0 |
| Alpine 3.21 | libpng | 1.6.37-r0 |
| Alpine 3.22 | libpng | 1.6.37-r0 |
| Alpine 3.23 | libpng | 1.6.37-r0 |
| Alpine 3.24 | libpng | 1.6.37-r0 |
| Alpine 3.6 | libpng | 1.6.37-r0 |
| Alpine 3.7 | libpng | 1.6.37-r0 |
| Alpine 3.8 | libpng | 1.6.37-r0 |
| Alpine 3.9 | libpng | 1.6.37-r0 |
| Debian 12 | libpng1.6 | 1.6.37-1 |
| Debian 13 | libpng1.6 | 1.6.37-1 |
| Debian 14 | libpng1.6 | 1.6.37-1 |