CVE-2017-12652
CVE-2017-12652
This page contains facts from public vulnerability sources. Check the original advisory before updating.
libpng before 1.6.32 does not properly check the length of chunks against the user limit.
CVSS 9.8 · Critical · EPSS 4.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libpng1.6 Debian:12
- Affected ranges
- ECOSYSTEM: < 1.6.32-1
Update to 1.6.32-1
libpng1.6 Debian:13
- Affected ranges
- ECOSYSTEM: < 1.6.32-1
Update to 1.6.32-1
libpng1.6 Debian:14
- Affected ranges
- ECOSYSTEM: < 1.6.32-1
Update to 1.6.32-1
libpng Ubuntu:Pro:14.04:LTS
- Versions
- 1.2.49-4ubuntu1
- 1.2.49-5ubuntu1
- 1.2.50-1ubuntu1
- 1.2.50-1ubuntu2
- 1.2.50-1ubuntu2.14.04.1
- 1.2.50-1ubuntu2.14.04.2
- 1.2.50-1ubuntu2.14.04.3
- 1.2.50-1ubuntu2.14.04.3+esm1
- 1.2.50-1ubuntu2.14.04.3+esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libpng Ubuntu:Pro:16.04:LTS
- Versions
- 1.2.51-0ubuntu3
- 1.2.54-1
- 1.2.54-1ubuntu1
- 1.2.54-1ubuntu1.1
- Affected ranges
- ECOSYSTEM: < 1.2.54-1ubuntu1.1+esm1
Update to 1.2.54-1ubuntu1.1+esm1
libpng1.6 Ubuntu:Pro:16.04:LTS
- Versions
- 1.6.20-2
- Affected ranges
- ECOSYSTEM: < 1.6.20-2ubuntu0.1~esm1
Update to 1.6.20-2ubuntu0.1~esm1
Original sources
- https://github.com/glennrp/libpng/blob/df7e9dae0c4aac63d55361e35709c864fa1b8363/ANNOUNCE
- http://www.securityfocus.com/bid/109269
- https://support.f5.com/csp/article/K88124225
- https://support.f5.com/csp/article/K88124225?utm_source=f5support&utm_medium=RSS
- https://security.netapp.com/advisory/ntap-20220506-0003/
- https://github.com/pnggroup/libpng/commit/347538efbdc21b8df684ebd92d37400b3ce85d55
- https://support.f5.com/csp/article/K88124225?utm_source=f5support&%3Butm_medium=RSS
- https://nvd.nist.gov/vuln/detail/CVE-2017-12652