An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.

An update of the syslinux package has been released.

According to the version of the libpng package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - An issue has been found in third-party PNM decoding     associated with libpng 1.6.35. It is a stack-based     buffer overflow in the function get_token in pnm2png.c     in pnm2png.(CVE-2018-14550)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An issue has been found in third-party PNM decoding     associated with libpng 1.6.35. It is a stack-based     buffer overflow in the function get_token in pnm2png.c     in pnm2png.(CVE-2018-14550)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201908-02 (libpng: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libpng. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, by enticing a user to process a specially crafted PNG       file, could cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

New libpng packages are available for Slackware 14.2 and -current to fix security issues.

ID	Name	Product	Family	Severity
204258	Photon OS 5.0: Syslinux PHSA-2023-5.0-0033	Nessus	PhotonOS Local Security Checks	critical
204103	Photon OS 3.0: Syslinux PHSA-2023-3.0-0602	Nessus	PhotonOS Local Security Checks	critical
203638	Photon OS 4.0: Syslinux PHSA-2023-4.0-0415	Nessus	PhotonOS Local Security Checks	critical
132832	EulerOS Virtualization for ARM 64 3.0.5.0 : libpng (EulerOS-SA-2020-1078)	Nessus	Huawei Local Security Checks	high
132608	EulerOS 2.0 SP8 : libpng (EulerOS-SA-2020-1015)	Nessus	Huawei Local Security Checks	high
127560	GLSA-201908-02 : libpng: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
124140	Slackware 14.2 / current : libpng (SSA:2019-107-01)	Nessus	Slackware Local Security Checks	high

Detections

Analytics

CVE-2018-14550

high

Tenable Plugins

critical

critical

critical

high

high

high

high