Home

CVE-2017-12652

Description

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.621

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.2.4Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 12.0.3Windows
SUSE-SU-2019:3060-1(SUSE Linux Enterprise Desktop 12-SP4 ) libpng16-16-1.6.8-15.5.2.x86_64.rpmLinux
SUSE-SU-2019:3060-1(SUSE Linux Enterprise Desktop 12-SP4 ) libpng16-16-32bit-1.6.8-15.5.2.x86_64.rpmLinux
SUSE-SU-2019:3060-1(SUSE Linux Enterprise Desktop 12-SP4 ) libpng16-16-debuginfo-1.6.8-15.5.2.x86_64.rpmLinux
SUSE-SU-2019:3060-1(SUSE Linux Enterprise Desktop 12-SP4 ) libpng16-16-debuginfo-32bit-1.6.8-15.5.2.x86_64.rpmLinux
SUSE-SU-2019:3060-1(SUSE Linux Enterprise Desktop 12-SP4 ) libpng16-debugsource-1.6.8-15.5.2.x86_64.rpmLinux
(RHSA-2020:3901) libpng security update libpng-1.5.13-8.el7.i686.rpmLinux
(RHSA-2020:3901) libpng security update libpng-1.5.13-8.el7.x86_64.rpmLinux
(RHSA-2020:3901) libpng security update libpng-devel-1.5.13-8.el7.i686.rpmLinux
(RHSA-2020:3901) libpng security update libpng-devel-1.5.13-8.el7.x86_64.rpmLinux
(RHSA-2020:3901) libpng security update libpng-static-1.5.13-8.el7.i686.rpmLinux
(RHSA-2020:3901) libpng security update libpng-static-1.5.13-8.el7.x86_64.rpmLinux
(CESA-2020:3901) libpng security update libpng-1.5.13-8.el7.x86_64.rpmLinux
(CESA-2020:3901) libpng security update libpng-devel-1.5.13-8.el7.x86_64.rpmLinux
(CESA-2020:3901) libpng security update libpng-static-1.5.13-8.el7.x86_64.rpmLinux
SUSE-SU-2023:3799-1(SUSE Linux Enterprise Server 12 SP5 ) libpng15-15-1.5.22-10.4.1.x86_64.rpmLinux
SUSE-SU-2023:3799-1(SUSE Linux Enterprise Server 12 SP5 ) libpng15-15-debuginfo-1.5.22-10.4.1.x86_64.rpmLinux
SUSE-SU-2023:3799-1(SUSE Linux Enterprise Server 12 SP5 ) libpng15-debugsource-1.5.22-10.4.1.x86_64.rpmLinux
SUSE-SU-2019:3060-1(SUSE Linux Enterprise Server 12-SP5 ) libpng16-16-1.6.8-15.5.2.x86_64_12_SP5.rpmLinux
SUSE-SU-2019:3060-1(SUSE Linux Enterprise Server 12-SP5 ) libpng16-16-32bit-1.6.8-15.5.2.x86_64_12_SP5.rpmLinux
SUSE-SU-2019:3060-1(SUSE Linux Enterprise Server 12-SP5 ) libpng16-16-debuginfo-1.6.8-15.5.2.x86_64_12_SP5.rpmLinux
SUSE-SU-2019:3060-1(SUSE Linux Enterprise Server 12-SP5 ) libpng16-16-debuginfo-32bit-1.6.8-15.5.2.x86_64_12_SP5.rpmLinux
SUSE-SU-2019:3060-1(SUSE Linux Enterprise Server 12-SP5 ) libpng16-debugsource-1.6.8-15.5.2.x86_64_12_SP5.rpmLinux
SUSE-SU-2020:0911-1(SUSE Linux Enterprise Server 12-SP5 ) libpng12-0-1.2.50-20.3.2.x86_64.rpmLinux
SUSE-SU-2020:0911-1(SUSE Linux Enterprise Server 12-SP5 ) libpng12-0-32bit-1.2.50-20.3.2.x86_64.rpmLinux
SUSE-SU-2020:0911-1(SUSE Linux Enterprise Server 12-SP5 ) libpng12-0-debuginfo-1.2.50-20.3.2.x86_64.rpmLinux
SUSE-SU-2020:0911-1(SUSE Linux Enterprise Server 12-SP5 ) libpng12-0-debuginfo-32bit-1.2.50-20.3.2.x86_64.rpmLinux
SUSE-SU-2020:0911-1(SUSE Linux Enterprise Server 12-SP5 ) libpng12-debugsource-1.2.50-20.3.2.x86_64.rpmLinux
(RHSA-2020:3901)Low: security update libpng-debuginfo-1.5.13-8.el7.i686.rpmLinux
(RHSA-2020:3901)Low: security update libpng-debuginfo-1.5.13-8.el7.x86_64.rpmLinux
Libpng update (ELSA-2020-3901) libpng-1.5.13-8.el7.i686.rpmLinux
Libpng update (ELSA-2020-3901) libpng-1.5.13-8.el7.x86_64.rpmLinux
Libpng-devel update (ELSA-2020-3901) libpng-devel-1.5.13-8.el7.i686.rpmLinux
Libpng-devel update (ELSA-2020-3901) libpng-devel-1.5.13-8.el7.x86_64.rpmLinux
Improper Input Validation Vulnerability (CVE-2017-12652)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234