Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - pngcrush: double-free in sPLT and png.c file (CVE-2015-7700)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5236-1 advisory.

    Brian Carpenter discovered that pngcrush incorrectly handled specially crafted file. An attacker could     possibly use this issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for pngcrush fixes the following issues :

  - CVE-2015-7700: Fix for a double-free vulnerability in     the sPLT chunk structure and png.c (boo#1056770)

A double-free bug was discovered in pngcrush's handling of the sPLT chunk. A malicious PNG could crash the pngcrush process.
(CVE-2015-7700)

ID	Name	Product	Family	Severity
198916	RHEL 7 : pngcrush (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
183576	Ubuntu 16.04 ESM : pngcrush vulnerability (USN-5236-1)	Nessus	Ubuntu Local Security Checks	critical
106070	openSUSE Security Update : pngcrush (openSUSE-2018-43)	Nessus	SuSE Local Security Checks	critical
88658	Amazon Linux AMI : pngcrush (ALAS-2016-646)	Nessus	Amazon Linux Local Security Checks	critical

Detections

Analytics

CVE-2015-7700

critical

Tenable Plugins

critical

critical

critical

critical