CVE-2008-6218
Summary
| CVE | CVE-2008-6218 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-02-20 17:30:03 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted PNG file. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
CompleteAV:N/AC:M/Au:N/C:N/I:N/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Libpng | Libpng | 1.2.0 | All | All | All |
| Application | Libpng | Libpng | 1.2.0 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.0 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.0 | beta3 | All | All |
| Application | Libpng | Libpng | 1.2.0 | beta4 | All | All |
| Application | Libpng | Libpng | 1.2.0 | beta5 | All | All |
| Application | Libpng | Libpng | 1.2.0 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.1 | All | All | All |
| Application | Libpng | Libpng | 1.2.1 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.1 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.1 | beta3 | All | All |
| Application | Libpng | Libpng | 1.2.1 | beta4 | All | All |
| Application | Libpng | Libpng | 1.2.1 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.1 | rc2 | All | All |
| Application | Libpng | Libpng | 1.2.10 | All | All | All |
| Application | Libpng | Libpng | 1.2.10 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.10 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.10 | beta3 | All | All |
| Application | Libpng | Libpng | 1.2.10 | beta4 | All | All |
| Application | Libpng | Libpng | 1.2.10 | beta5 | All | All |
| Application | Libpng | Libpng | 1.2.10 | beta6 | All | All |
| Application | Libpng | Libpng | 1.2.10 | beta7 | All | All |
| Application | Libpng | Libpng | 1.2.10 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.10 | rc2 | All | All |
| Application | Libpng | Libpng | 1.2.10 | rc3 | All | All |
| Application | Libpng | Libpng | 1.2.11 | All | All | All |
| Application | Libpng | Libpng | 1.2.11 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.11 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.11 | beta3 | All | All |
| Application | Libpng | Libpng | 1.2.11 | beta4 | All | All |
| Application | Libpng | Libpng | 1.2.11 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.11 | rc2 | All | All |
| Application | Libpng | Libpng | 1.2.11 | rc3 | All | All |
| Application | Libpng | Libpng | 1.2.11 | rc5 | All | All |
| Application | Libpng | Libpng | 1.2.13 | All | All | All |
| Application | Libpng | Libpng | 1.2.13 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.13 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.13 | rc2 | All | All |
| Application | Libpng | Libpng | 1.2.14 | All | All | All |
| Application | Libpng | Libpng | 1.2.14 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.14 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.14 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.15 | All | All | All |
| Application | Libpng | Libpng | 1.2.15 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.15 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.15 | beta3 | All | All |
| Application | Libpng | Libpng | 1.2.15 | beta4 | All | All |
| Application | Libpng | Libpng | 1.2.15 | beta5 | All | All |
| Application | Libpng | Libpng | 1.2.15 | beta6 | All | All |
| Application | Libpng | Libpng | 1.2.15 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.15 | rc2 | All | All |
| Application | Libpng | Libpng | 1.2.15 | rc3 | All | All |
| Application | Libpng | Libpng | 1.2.15 | rc4 | All | All |
| Application | Libpng | Libpng | 1.2.15 | rc5 | All | All |
| Application | Libpng | Libpng | 1.2.16 | All | All | All |
| Application | Libpng | Libpng | 1.2.16 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.16 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.16 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.17 | All | All | All |
| Application | Libpng | Libpng | 1.2.17 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.17 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.17 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.17 | rc2 | All | All |
| Application | Libpng | Libpng | 1.2.17 | rc3 | All | All |
| Application | Libpng | Libpng | 1.2.17 | rc4 | All | All |
| Application | Libpng | Libpng | 1.2.18 | All | All | All |
| Application | Libpng | Libpng | 1.2.19 | All | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta10 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta11 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta12 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta13 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta14 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta15 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta16 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta17 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta18 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta19 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta20 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta21 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta22 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta23 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta24 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta25 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta26 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta27 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta28 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta29 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta3 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta30 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta31 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta32 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta33 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta4 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta5 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta6 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta7 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta8 | All | All |
| Application | Libpng | Libpng | 1.2.19 | beta9 | All | All |
| Application | Libpng | Libpng | 1.2.19 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.19 | rc2 | All | All |
| Application | Libpng | Libpng | 1.2.19 | rc3 | All | All |
| Application | Libpng | Libpng | 1.2.19 | rc4 | All | All |
| Application | Libpng | Libpng | 1.2.19 | rc5 | All | All |
| Application | Libpng | Libpng | 1.2.19 | rc6 | All | All |
| Application | Libpng | Libpng | 1.2.2 | All | All | All |
| Application | Libpng | Libpng | 1.2.2 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.2 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.2 | beta3 | All | All |
| Application | Libpng | Libpng | 1.2.2 | beta4 | All | All |
| Application | Libpng | Libpng | 1.2.2 | beta5 | All | All |
| Application | Libpng | Libpng | 1.2.2 | beta6 | All | All |
| Application | Libpng | Libpng | 1.2.2 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.20 | All | All | All |
| Application | Libpng | Libpng | 1.2.20 | beta01 | All | All |
| Application | Libpng | Libpng | 1.2.20 | beta02 | All | All |
| Application | Libpng | Libpng | 1.2.20 | beta03 | All | All |
| Application | Libpng | Libpng | 1.2.20 | beta04 | All | All |
| Application | Libpng | Libpng | 1.2.20 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.20 | rc2 | All | All |
| Application | Libpng | Libpng | 1.2.20 | rc3 | All | All |
| Application | Libpng | Libpng | 1.2.20 | rc4 | All | All |
| Application | Libpng | Libpng | 1.2.20 | rc5 | All | All |
| Application | Libpng | Libpng | 1.2.20 | rc6 | All | All |
| Application | Libpng | Libpng | 1.2.21 | All | All | All |
| Application | Libpng | Libpng | 1.2.21 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.21 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.21 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.21 | rc2 | All | All |
| Application | Libpng | Libpng | 1.2.21 | rc3 | All | All |
| Application | Libpng | Libpng | 1.2.22 | All | All | All |
| Application | Libpng | Libpng | 1.2.22 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.22 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.22 | beta2-1.2.21 | All | All |
| Application | Libpng | Libpng | 1.2.22 | beta3 | All | All |
| Application | Libpng | Libpng | 1.2.22 | beta3-1.2.21 | All | All |
| Application | Libpng | Libpng | 1.2.22 | beta4 | All | All |
| Application | Libpng | Libpng | 1.2.22 | beta4-1.2.21 | All | All |
| Application | Libpng | Libpng | 1.2.22 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.22 | rc1-1.2.21 | All | All |
| Application | Libpng | Libpng | 1.2.23 | All | All | All |
| Application | Libpng | Libpng | 1.2.23 | beta01 | All | All |
| Application | Libpng | Libpng | 1.2.23 | beta01-1.2.22 | All | All |
| Application | Libpng | Libpng | 1.2.23 | beta02 | All | All |
| Application | Libpng | Libpng | 1.2.23 | beta02-1.2.22 | All | All |
| Application | Libpng | Libpng | 1.2.23 | beta03 | All | All |
| Application | Libpng | Libpng | 1.2.23 | beta03-1.2.22 | All | All |
| Application | Libpng | Libpng | 1.2.23 | beta04 | All | All |
| Application | Libpng | Libpng | 1.2.23 | beta04-1.2.22 | All | All |
| Application | Libpng | Libpng | 1.2.23 | beta05 | All | All |
| Application | Libpng | Libpng | 1.2.23 | beta05-1.2.22 | All | All |
| Application | Libpng | Libpng | 1.2.23 | rc01 | All | All |
| Application | Libpng | Libpng | 1.2.23 | rc01-1.2.22 | All | All |
| Application | Libpng | Libpng | 1.2.24 | All | All | All |
| Application | Libpng | Libpng | 1.2.24 | beta01 | All | All |
| Application | Libpng | Libpng | 1.2.24 | beta01-1.2.23 | All | All |
| Application | Libpng | Libpng | 1.2.24 | beta02 | All | All |
| Application | Libpng | Libpng | 1.2.24 | beta02-1.2.23 | All | All |
| Application | Libpng | Libpng | 1.2.24 | beta03 | All | All |
| Application | Libpng | Libpng | 1.2.24 | beta03-1.2.23 | All | All |
| Application | Libpng | Libpng | 1.2.24 | rc01 | All | All |
| Application | Libpng | Libpng | 1.2.24 | rc01-1.2.23 | All | All |
| Application | Libpng | Libpng | 1.2.25 | All | All | All |
| Application | Libpng | Libpng | 1.2.25 | beta01 | All | All |
| Application | Libpng | Libpng | 1.2.25 | beta02 | All | All |
| Application | Libpng | Libpng | 1.2.25 | beta03 | All | All |
| Application | Libpng | Libpng | 1.2.25 | beta04 | All | All |
| Application | Libpng | Libpng | 1.2.25 | beta05 | All | All |
| Application | Libpng | Libpng | 1.2.25 | beta06 | All | All |
| Application | Libpng | Libpng | 1.2.25 | rc01 | All | All |
| Application | Libpng | Libpng | 1.2.25 | rc02 | All | All |
| Application | Libpng | Libpng | 1.2.26 | All | All | All |
| Application | Libpng | Libpng | 1.2.26 | beta01 | All | All |
| Application | Libpng | Libpng | 1.2.26 | beta02 | All | All |
| Application | Libpng | Libpng | 1.2.26 | beta03 | All | All |
| Application | Libpng | Libpng | 1.2.26 | beta04 | All | All |
| Application | Libpng | Libpng | 1.2.26 | beta05 | All | All |
| Application | Libpng | Libpng | 1.2.26 | beta06 | All | All |
| Application | Libpng | Libpng | 1.2.26 | rc01 | All | All |
| Application | Libpng | Libpng | 1.2.27 | All | All | All |
| Application | Libpng | Libpng | 1.2.28 | All | All | All |
| Application | Libpng | Libpng | 1.2.29 | All | All | All |
| Application | Libpng | Libpng | 1.2.3 | All | All | All |
| Application | Libpng | Libpng | 1.2.3 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.3 | rc2 | All | All |
| Application | Libpng | Libpng | 1.2.3 | rc3 | All | All |
| Application | Libpng | Libpng | 1.2.3 | rc4 | All | All |
| Application | Libpng | Libpng | 1.2.3 | rc5 | All | All |
| Application | Libpng | Libpng | 1.2.3 | rc6 | All | All |
| Application | Libpng | Libpng | 1.2.30 | All | All | All |
| Application | Libpng | Libpng | 1.2.31 | All | All | All |
| Application | Libpng | Libpng | 1.2.32 | All | All | All |
| Application | Libpng | Libpng | 1.2.33 | All | All | All |
| Application | Libpng | Libpng | 1.2.4 | All | All | All |
| Application | Libpng | Libpng | 1.2.4 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.4 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.4 | beta3 | All | All |
| Application | Libpng | Libpng | 1.2.4 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.5 | All | All | All |
| Application | Libpng | Libpng | 1.2.5 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.5 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.5 | beta3 | All | All |
| Application | Libpng | Libpng | 1.2.5 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.5 | rc2 | All | All |
| Application | Libpng | Libpng | 1.2.5 | rc3 | All | All |
| Application | Libpng | Libpng | 1.2.6 | All | All | All |
| Application | Libpng | Libpng | 1.2.6 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.6 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.6 | beta3 | All | All |
| Application | Libpng | Libpng | 1.2.6 | beta4 | All | All |
| Application | Libpng | Libpng | 1.2.6 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.6 | rc2 | All | All |
| Application | Libpng | Libpng | 1.2.6 | rc3 | All | All |
| Application | Libpng | Libpng | 1.2.6 | rc4 | All | All |
| Application | Libpng | Libpng | 1.2.6 | rc5 | All | All |
| Application | Libpng | Libpng | 1.2.7 | All | All | All |
| Application | Libpng | Libpng | 1.2.7 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.7 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.8 | All | All | All |
| Application | Libpng | Libpng | 1.2.8 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.8 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.8 | beta3 | All | All |
| Application | Libpng | Libpng | 1.2.8 | beta4 | All | All |
| Application | Libpng | Libpng | 1.2.8 | beta5 | All | All |
| Application | Libpng | Libpng | 1.2.8 | rc1 | All | All |
| Application | Libpng | Libpng | 1.2.8 | rc2 | All | All |
| Application | Libpng | Libpng | 1.2.8 | rc3 | All | All |
| Application | Libpng | Libpng | 1.2.8 | rc4 | All | All |
| Application | Libpng | Libpng | 1.2.8 | rc5 | All | All |
| Application | Libpng | Libpng | 1.2.9 | All | All | All |
| Application | Libpng | Libpng | 1.2.9 | beta1 | All | All |
| Application | Libpng | Libpng | 1.2.9 | beta10 | All | All |
| Application | Libpng | Libpng | 1.2.9 | beta2 | All | All |
| Application | Libpng | Libpng | 1.2.9 | beta3 | All | All |
| Application | Libpng | Libpng | 1.2.9 | beta4 | All | All |
| Application | Libpng | Libpng | 1.2.9 | beta5 | All | All |
| Application | Libpng | Libpng | 1.2.9 | beta6 | All | All |
| Application | Libpng | Libpng | 1.2.9 | beta7 | All | All |
| Application | Libpng | Libpng | 1.2.9 | beta8 | All | All |
| Application | Libpng | Libpng | 1.2.9 | beta9 | All | All |
| Application | Libpng | Libpng | 1.2.9 | rc1 | All | All |
| Application | Libpng | Libpng | 1.4.0 | beta36 | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Libpng Library 'png_handle_tEXt()' Memory Leak Denial of Service Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Debian -- Security Information -- DSA-1750-1 libpng | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Gentoo Linux Documentation -- libpng: Multiple vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| libpng Memory Leak in png_handle_tXTt() May Let Remote Users Deny Service - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Support / Security / Advisories / / MDVSA-2010:133 | Mandriva | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| Gentoo update for libpng - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Webmail - OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Debian update for libpng - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| rPath update for libpng - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| LIBPNG: PNG reference library download | SourceForge.net | af854a3a-2127-422b-91ae-364da2661108 | sourceforge.net | Patch |
| Page not found - SourceForge.net | af854a3a-2127-422b-91ae-364da2661108 | sourceforge.net | Patch |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| libpng "png_handle_tEXt()" Memory Leak Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| Advisories:rPSA-2009-0046 - rPath Wiki | af854a3a-2127-422b-91ae-364da2661108 | wiki.rpath.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|---|---|---|
| Red Hat | 2009-06-03 | Joshua Bressers | Red Hat does not consider this bug a security flaw. For more details please see the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=468990 |
There are currently no legacy QID mappings associated with this CVE.