MGASA-2014-0131

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2014-0131.html

Import Source

https://advisories.mageia.org/MGASA-2014-0131.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2014-0131

Related

CVE-2014-0333

Published

2014-03-15T16:29:56Z

Modified

2015-07-09T07:56:53Z

Summary

Updated libpng package fixes security vulnerability

Details

The pngpushread_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero (CVE-2014-0333).

References

https://advisories.mageia.org/MGASA-2014-0131.html
https://bugs.mageia.org/show_bug.cgi?id=13001
http://lists.opensuse.org/opensuse-updates/2014-03/msg00029.html

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2014-0131

Affected packages