The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero.

Updated libpng package fixes security vulnerabilities :

The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero (CVE-2014-0333).

libpng versions 1.6.9 through 1.6.15 have an integer-overflow vulnerability in png_combine_row() when decoding very wide interlaced images, which can allow an attacker to overwrite an arbitrary amount of memory with arbitrary (attacker-controlled) data (CVE-2014-9495).

The remote host is running VLC 2.x prior to 2.1.5 and is affected by multiple vulnerabilities :

 - An error exists in the 'png_push_read_chunk()' function within the file 'pngpread.c' from the included libpng library that can allow denial of service attacks. (CVE-2014-0333)
 - A buffer overflow error exists in the 'read_server_hello()' function within the file 'lib/gnutls_handshake.c' from the included GnuTLS library that can allow arbitrary code execution or denial of service. (CVE-2014-3466)
 - A heap-based buffer overflow error exists in the transcode module due to improper validation of user-supplied input when handling invalid channel counts. An attacker can exploit this to execute arbitrary code. (CVE-2014-6440)

The version of VLC media player installed on the remote host is prior to 2.1.5. It is, therefore, affected by the following vulnerabilities :

  - An error exists in the png_push_read_chunk() function     within the file 'pngpread.c' from the included libpng     library that can allow denial of service attacks.
    (CVE-2014-0333)

  - A buffer overflow error exists in the     read_server_hello() function within the file     'lib/gnutls_handshake.c' from the included GnuTLS     library that can allow arbitrary code execution or     denial of service. (CVE-2014-3466)

  - A heap-based buffer overflow error exists in the     transcode module due to improper validation of     user-supplied input when handling invalid channel     counts. An attacker can exploit this to execute     arbitrary code. (CVE-2014-6440)

The remote host is affected by the vulnerability described in GLSA-201408-06 (libpng: Multiple vulnerabilities)

    The png_push_read_chunk function in pngpread.c in the progressive       decoder enters an infinite loop, when it encounters a zero-length IDAT       chunk. In addition certain integer overflows have been detected and       corrected.
    The 1.2 branch is not affected by these vulnerabilities.
  Impact :

    A remote attacker could entice a user to open a specially crafted PNG       file using an application linked against libpng, possibly resulting in       Denial of Service.
  Workaround :

    There is no known workaround at this time.

libpng16 was updated to fix a endless loop denial of service in the png reader code. (CVE-2014-0333 [bnc#866298])

Fix CVE-2013-6954 (#1056853) and CVE-2014-0333 (#1070987)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libpng 1.6.10 bug fix release.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
82343	Mandriva Linux Security Advisory : libpng (MDVSA-2015:090)	Nessus	Mandriva Local Security Checks	critical
9265	VLC Media Player < 2.1.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
78626	VLC Media Player < 2.1.5 Multiple Vulnerabilities	Nessus	Windows	critical
77213	GLSA-201408-06 : libpng: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
75285	openSUSE Security Update : libpng16 (openSUSE-SU-2014:0358-1)	Nessus	SuSE Local Security Checks	medium
74232	Fedora 20 : libpng-1.6.6-3.fc20 (2014-6631)	Nessus	Fedora Local Security Checks	medium
73315	Fedora 20 : mingw-libpng-1.6.10-1.fc20 (2014-4564)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2014-0333

high

Tenable Plugins

critical

medium

critical

medium

medium

medium

medium