Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Gentoo: GLSA-200600-10 Moderate: libjpeg Buffer Overflow Vulnerability

gentoo
Calendar Grey May 14, 2004
Scroller Gentoo
A medium severity flaw in Fedora's libjpeg library may result in application crashes when processing JPEG files, leading to potential service disruptions.
A bug in the libpng library can be abused to crash programs making use of that library to decode PNG images.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200405-06
                                            https://security.gentoo.org/

  Severity: Normal
     Title: libpng denial of service vulnerability
      Date: May 14, 2004
      Bugs: #49887
        ID: 200405-06


Synopsis
=======
A bug in the libpng library can be abused to crash programs making use
of that library to decode PNG images.

Background
=========
libpng is a standard library used to process PNG (Portable Network
Graphics) images.

Affected packages
================
    -------------------------------------------------------------------
     Package            /   Vulnerable   /                  Unaffected
    -------------------------------------------------------------------
  1  media-libs/libpng      <= 1.2.5-r4                    >= 1.2.5-r5

==========
libpng provides two functions (png_chunk_error and png_chunk_warning)
for default error and warning messages handling. These functions do ...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory denial of service gentoo software update libpng normal severity png image

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory denial of service gentoo software update libpng normal severity png image

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround