libpng 'pngerror.c' Off-By-One Error Denial Of Service Vulnerability

Bugtraq ID:	48474
Class:	Boundary Condition Error
CVE:	CVE-2011-2501
Remote:	Yes
Local:	No
Published:	Jun 07 2011 12:00AM
Updated:	Apr 13 2015 09:49PM
Credit:	libpng
Vulnerable:	Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux 8.1 Slackware Linux x86_64 -current Slackware Linux 13.37 x86_64 Slackware Linux 13.37 Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Pardus Linux 2009 0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 libpng libpng 1.2.23 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Avaya 96x1 IP Deskphone 6
Not Vulnerable:

libpng 'pngerror.c' Off-By-One Error Denial Of Service Vulnerability

libpng is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to crash applications that use the affected library.

libpng 1.2.23 is vulnerable; other versions may also be affected.

Note: This issue is related to BID 10244 (LibPNG Broken PNG Out Of Bounds Access Denial Of Service Vulnerability).

libpng 'pngerror.c' Off-By-One Error Denial Of Service Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

libpng 'pngerror.c' Off-By-One Error Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Slackware Linux x86_64 -current

• Slackware libpng-1.4.8-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ l/libpng-1.4.8-x86_64-1.txz

Slackware Linux 12.0

• Slackware libpng-1.2.46-i486-1_slack12.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ libpng-1.2.46-i486-1_slack12.0.tgz

Slackware Linux -current

• Slackware libpng-1.4.8-i486-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/li bpng-1.4.8-i486-1.txz

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva lib64png-devel-1.2.31-2.4mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64png-static-devel-1.2.31-2.4mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64png3-1.2.31-2.4mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libpng-source-1.2.31-2.4mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Slackware Linux 12.2

• Slackware libpng-1.2.46-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ libpng-1.2.46-i486-1_slack12.2.tgz

MandrakeSoft Enterprise Server 5

• Mandriva libpng-devel-1.2.31-2.4mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libpng-source-1.2.31-2.4mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libpng-static-devel-1.2.31-2.4mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libpng3-1.2.31-2.4mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Slackware Linux 13.1 x86_64

• Slackware libpng-1.4.8-x86_64-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package s/libpng-1.4.8-x86_64-1_slack13.1.txz

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva lib64png-devel-1.2.43-1.2mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64png-static-devel-1.2.43-1.2mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64png3-1.2.43-1.2mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libpng-source-1.2.43-1.2mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Slackware Linux 13.1

• Slackware libpng-1.4.8-i486-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ libpng-1.4.8-i486-1_slack13.1.txz

Slackware Linux 13.0 x86_64

• Slackware libpng-1.2.46-x86_64-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/libpng-1.2.46-x86_64-1_slack13.0.txz

Slackware Linux 12.1

• Slackware libpng-1.2.46-i486-1_slack12.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ libpng-1.2.46-i486-1_slack12.1.tgz

Mandriva Linux Mandrake 2010.1

• Mandriva libpng-devel-1.2.43-1.2mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libpng-source-1.2.43-1.2mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libpng-static-devel-1.2.43-1.2mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libpng3-1.2.43-1.2mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Slackware Linux 13.37 x86_64

• Slackware libpng-1.4.8-x86_64-1_slack13.37.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packag es/libpng-1.4.8-x86_64-1_slack13.37.txz

Slackware Linux 13.0

• Slackware libpng-1.2.46-i486-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/ libpng-1.2.46-i486-1_slack13.0.txz

Slackware Linux 11.0

• Slackware libpng-1.2.46-i486-1_slack11.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/ libpng-1.2.46-i486-1_slack11.0.tgz

Slackware Linux 13.37

• Slackware libpng-1.4.8-i486-1_slack13.37.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages /libpng-1.4.8-i486-1_slack13.37.txz

Slackware Linux 10.0

• Slackware libpng-1.2.46-i486-1_slack10.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ libpng-1.2.46-i486-1_slack10.0.tgz

Slackware Linux 10.1

• Slackware libpng-1.2.46-i486-1_slack10.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ libpng-1.2.46-i486-1_slack10.1.tgz

Slackware Linux 10.2

• Slackware libpng-1.2.46-i486-1_slack10.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ libpng-1.2.46-i486-1_slack10.2.tgz

Slackware Linux 8.1

• Slackware libpng-1.2.46-i386-1_slack8.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/l ibpng-1.2.46-i386-1_slack8.1.tgz

Slackware Linux 9.0

• Slackware libpng-1.2.46-i386-1_slack9.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/l ibpng-1.2.46-i386-1_slack9.0.tgz

Slackware Linux 9.1

• Slackware libpng-1.2.46-i486-1_slack9.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/l ibpng-1.2.46-i486-1_slack9.1.tgz

libpng 'pngerror.c' Off-By-One Error Denial Of Service Vulnerability

References:

• [png-mng-implement] CVE-2004-0421 (Frank Busse)
  
• libpng Homepage (libpng)
  
• ASA-2011-297 Wind River Linux libvirt, libpng, FreeType Security Update (WIND002 (Avaya)