CVE-2016-10087

Name
CVE-2016-10087
Description
The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Mailing List http://www.openwall.com/lists/oss-security/2016/12/29/2
Mailing List http://www.openwall.com/lists/oss-security/2016/12/30/4
Third Party Advisory http://www.securityfocus.com/bid/95157
cve@mitre.org https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
cve@mitre.org https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
cve@mitre.org https://security.gentoo.org/glsa/201701-74
cve@mitre.org https://usn.ubuntu.com/3712-1/
cve@mitre.org https://usn.ubuntu.com/3712-2/

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:libpng:libpng:0.8:*:*:*:*:*:*:* libpng == None == 0.8
cpe:2.3:a:libpng:libpng:0.71:*:*:*:*:*:*:* libpng == None == 0.71
cpe:2.3:a:libpng:libpng:0.81:*:*:*:*:*:*:* libpng == None == 0.81
cpe:2.3:a:libpng:libpng:0.82:*:*:*:*:*:*:* libpng == None == 0.82
cpe:2.3:a:libpng:libpng:0.85:*:*:*:*:*:*:* libpng == None == 0.85
cpe:2.3:a:libpng:libpng:0.86:*:*:*:*:*:*:* libpng == None == 0.86
cpe:2.3:a:libpng:libpng:0.87:*:*:*:*:*:*:* libpng == None == 0.87
cpe:2.3:a:libpng:libpng:0.88:*:*:*:*:*:*:* libpng == None == 0.88
cpe:2.3:a:libpng:libpng:0.89:*:*:*:*:*:*:* libpng == None == 0.89
cpe:2.3:a:libpng:libpng:0.89c:*:*:*:*:*:*:* libpng == None == 0.89c
cpe:2.3:a:libpng:libpng:0.90:*:*:*:*:*:*:* libpng == None == 0.90
cpe:2.3:a:libpng:libpng:0.95:*:*:*:*:*:*:* libpng == None == 0.95
cpe:2.3:a:libpng:libpng:0.96:*:*:*:*:*:*:* libpng == None == 0.96
cpe:2.3:a:libpng:libpng:0.97:*:*:*:*:*:*:* libpng == None == 0.97
cpe:2.3:a:libpng:libpng:0.98:*:*:*:*:*:*:* libpng == None == 0.98
cpe:2.3:a:libpng:libpng:0.99:*:*:*:*:*:*:* libpng == None == 0.99
cpe:2.3:a:libpng:libpng:0.99a:*:*:*:*:*:*:* libpng == None == 0.99a
cpe:2.3:a:libpng:libpng:0.99b:*:*:*:*:*:*:* libpng == None == 0.99b
cpe:2.3:a:libpng:libpng:0.99c:*:*:*:*:*:*:* libpng == None == 0.99c
cpe:2.3:a:libpng:libpng:0.99d:*:*:*:*:*:*:* libpng == None == 0.99d
cpe:2.3:a:libpng:libpng:0.99e:*:*:*:*:*:*:* libpng == None == 0.99e
cpe:2.3:a:libpng:libpng:0.99f:*:*:*:*:*:*:* libpng == None == 0.99f
cpe:2.3:a:libpng:libpng:0.99g:*:*:*:*:*:*:* libpng == None == 0.99g
cpe:2.3:a:libpng:libpng:0.99h:*:*:*:*:*:*:* libpng == None == 0.99h
cpe:2.3:a:libpng:libpng:1.00:*:*:*:*:*:*:* libpng == None == 1.00
cpe:2.3:a:libpng:libpng:1.0.0:*:*:*:*:*:*:* libpng == None == 1.0.0
cpe:2.3:a:libpng:libpng:1.0.0a:*:*:*:*:*:*:* libpng == None == 1.0.0a
cpe:2.3:a:libpng:libpng:1.0.0b:*:*:*:*:*:*:* libpng == None == 1.0.0b
cpe:2.3:a:libpng:libpng:1.0.1:*:*:*:*:*:*:* libpng == None == 1.0.1
cpe:2.3:a:libpng:libpng:1.0.1a:*:*:*:*:*:*:* libpng == None == 1.0.1a
cpe:2.3:a:libpng:libpng:1.0.1b:*:*:*:*:*:*:* libpng == None == 1.0.1b
cpe:2.3:a:libpng:libpng:1.0.1c:*:*:*:*:*:*:* libpng == None == 1.0.1c
cpe:2.3:a:libpng:libpng:1.0.1d:*:*:*:*:*:*:* libpng == None == 1.0.1d
cpe:2.3:a:libpng:libpng:1.0.1e:*:*:*:*:*:*:* libpng == None == 1.0.1e
cpe:2.3:a:libpng:libpng:1.0.2:*:*:*:*:*:*:* libpng == None == 1.0.2
cpe:2.3:a:libpng:libpng:1.0.2a:*:*:*:*:*:*:* libpng == None == 1.0.2a
cpe:2.3:a:libpng:libpng:1.0.3:*:*:*:*:*:*:* libpng == None == 1.0.3
cpe:2.3:a:libpng:libpng:1.0.3a:*:*:*:*:*:*:* libpng == None == 1.0.3a
cpe:2.3:a:libpng:libpng:1.0.3b:*:*:*:*:*:*:* libpng == None == 1.0.3b
cpe:2.3:a:libpng:libpng:1.0.3d:*:*:*:*:*:*:* libpng == None == 1.0.3d
cpe:2.3:a:libpng:libpng:1.0.4:*:*:*:*:*:*:* libpng == None == 1.0.4
cpe:2.3:a:libpng:libpng:1.0.4a:*:*:*:*:*:*:* libpng == None == 1.0.4a
cpe:2.3:a:libpng:libpng:1.0.4b:*:*:*:*:*:*:* libpng == None == 1.0.4b
cpe:2.3:a:libpng:libpng:1.0.4c:*:*:*:*:*:*:* libpng == None == 1.0.4c
cpe:2.3:a:libpng:libpng:1.0.4d:*:*:*:*:*:*:* libpng == None == 1.0.4d
cpe:2.3:a:libpng:libpng:1.0.4e:*:*:*:*:*:*:* libpng == None == 1.0.4e
cpe:2.3:a:libpng:libpng:1.0.4f:*:*:*:*:*:*:* libpng == None == 1.0.4f
cpe:2.3:a:libpng:libpng:1.0.5:*:*:*:*:*:*:* libpng == None == 1.0.5
cpe:2.3:a:libpng:libpng:1.0.5a:*:*:*:*:*:*:* libpng == None == 1.0.5a
cpe:2.3:a:libpng:libpng:1.0.5b:*:*:*:*:*:*:* libpng == None == 1.0.5b
cpe:2.3:a:libpng:libpng:1.0.5c:*:*:*:*:*:*:* libpng == None == 1.0.5c
cpe:2.3:a:libpng:libpng:1.0.5d:*:*:*:*:*:*:* libpng == None == 1.0.5d
cpe:2.3:a:libpng:libpng:1.0.5e:*:*:*:*:*:*:* libpng == None == 1.0.5e
cpe:2.3:a:libpng:libpng:1.0.5f:*:*:*:*:*:*:* libpng == None == 1.0.5f
cpe:2.3:a:libpng:libpng:1.0.5g:*:*:*:*:*:*:* libpng == None == 1.0.5g
cpe:2.3:a:libpng:libpng:1.0.5h:*:*:*:*:*:*:* libpng == None == 1.0.5h
cpe:2.3:a:libpng:libpng:1.0.5i:*:*:*:*:*:*:* libpng == None == 1.0.5i
cpe:2.3:a:libpng:libpng:1.0.5j:*:*:*:*:*:*:* libpng == None == 1.0.5j
cpe:2.3:a:libpng:libpng:1.0.5k:*:*:*:*:*:*:* libpng == None == 1.0.5k
cpe:2.3:a:libpng:libpng:1.0.5l:*:*:*:*:*:*:* libpng == None == 1.0.5l
cpe:2.3:a:libpng:libpng:1.0.5m:*:*:*:*:*:*:* libpng == None == 1.0.5m
cpe:2.3:a:libpng:libpng:1.0.5n:*:*:*:*:*:*:* libpng == None == 1.0.5n
cpe:2.3:a:libpng:libpng:1.0.5o:*:*:*:*:*:*:* libpng == None == 1.0.5o
cpe:2.3:a:libpng:libpng:1.0.5p:*:*:*:*:*:*:* libpng == None == 1.0.5p
cpe:2.3:a:libpng:libpng:1.0.5q:*:*:*:*:*:*:* libpng == None == 1.0.5q
cpe:2.3:a:libpng:libpng:1.0.5r:*:*:*:*:*:*:* libpng == None == 1.0.5r
cpe:2.3:a:libpng:libpng:1.0.5s:*:*:*:*:*:*:* libpng == None == 1.0.5s
cpe:2.3:a:libpng:libpng:1.0.5t:*:*:*:*:*:*:* libpng == None == 1.0.5t
cpe:2.3:a:libpng:libpng:1.0.5u:*:*:*:*:*:*:* libpng == None == 1.0.5u
cpe:2.3:a:libpng:libpng:1.0.5v:*:*:*:*:*:*:* libpng == None == 1.0.5v
cpe:2.3:a:libpng:libpng:1.0.6:*:*:*:*:*:*:* libpng == None == 1.0.6
cpe:2.3:a:libpng:libpng:1.0.6d:*:*:*:*:*:*:* libpng == None == 1.0.6d
cpe:2.3:a:libpng:libpng:1.0.6e:*:*:*:*:*:*:* libpng == None == 1.0.6e
cpe:2.3:a:libpng:libpng:1.0.6f:*:*:*:*:*:*:* libpng == None == 1.0.6f
cpe:2.3:a:libpng:libpng:1.0.6g:*:*:*:*:*:*:* libpng == None == 1.0.6g
cpe:2.3:a:libpng:libpng:1.0.6h:*:*:*:*:*:*:* libpng == None == 1.0.6h
cpe:2.3:a:libpng:libpng:1.0.6i:*:*:*:*:*:*:* libpng == None == 1.0.6i
cpe:2.3:a:libpng:libpng:1.0.6j:*:*:*:*:*:*:* libpng == None == 1.0.6j
cpe:2.3:a:libpng:libpng:1.0.7:*:*:*:*:*:*:* libpng == None == 1.0.7
cpe:2.3:a:libpng:libpng:1.0.8:*:*:*:*:*:*:* libpng == None == 1.0.8
cpe:2.3:a:libpng:libpng:1.0.9:*:*:*:*:*:*:* libpng == None == 1.0.9
cpe:2.3:a:libpng:libpng:1.0.10:*:*:*:*:*:*:* libpng == None == 1.0.10
cpe:2.3:a:libpng:libpng:1.0.11:*:*:*:*:*:*:* libpng == None == 1.0.11
cpe:2.3:a:libpng:libpng:1.0.12:*:*:*:*:*:*:* libpng == None == 1.0.12
cpe:2.3:a:libpng:libpng:1.0.13:*:*:*:*:*:*:* libpng == None == 1.0.13
cpe:2.3:a:libpng:libpng:1.0.14:*:*:*:*:*:*:* libpng == None == 1.0.14
cpe:2.3:a:libpng:libpng:1.0.15:*:*:*:*:*:*:* libpng == None == 1.0.15
cpe:2.3:a:libpng:libpng:1.0.16:*:*:*:*:*:*:* libpng == None == 1.0.16
cpe:2.3:a:libpng:libpng:1.0.17:*:*:*:*:*:*:* libpng == None == 1.0.17
cpe:2.3:a:libpng:libpng:1.0.18:*:*:*:*:*:*:* libpng == None == 1.0.18
cpe:2.3:a:libpng:libpng:1.0.19:*:*:*:*:*:*:* libpng == None == 1.0.19
cpe:2.3:a:libpng:libpng:1.0.20:*:*:*:*:*:*:* libpng == None == 1.0.20
cpe:2.3:a:libpng:libpng:1.0.21:*:*:*:*:*:*:* libpng == None == 1.0.21
cpe:2.3:a:libpng:libpng:1.0.22:*:*:*:*:*:*:* libpng == None == 1.0.22
cpe:2.3:a:libpng:libpng:1.0.23:*:*:*:*:*:*:* libpng == None == 1.0.23
cpe:2.3:a:libpng:libpng:1.0.24:*:*:*:*:*:*:* libpng == None == 1.0.24
cpe:2.3:a:libpng:libpng:1.0.25:*:*:*:*:*:*:* libpng == None == 1.0.25
cpe:2.3:a:libpng:libpng:1.0.26:*:*:*:*:*:*:* libpng == None == 1.0.26
cpe:2.3:a:libpng:libpng:1.0.27:*:*:*:*:*:*:* libpng == None == 1.0.27
cpe:2.3:a:libpng:libpng:1.0.28:*:*:*:*:*:*:* libpng == None == 1.0.28
cpe:2.3:a:libpng:libpng:1.0.29:*:*:*:*:*:*:* libpng == None == 1.0.29
cpe:2.3:a:libpng:libpng:1.0.30:*:*:*:*:*:*:* libpng == None == 1.0.30
cpe:2.3:a:libpng:libpng:1.0.31:*:*:*:*:*:*:* libpng == None == 1.0.31
cpe:2.3:a:libpng:libpng:1.0.32:*:*:*:*:*:*:* libpng == None == 1.0.32
cpe:2.3:a:libpng:libpng:1.0.33:*:*:*:*:*:*:* libpng == None == 1.0.33
cpe:2.3:a:libpng:libpng:1.0.34:*:*:*:*:*:*:* libpng == None == 1.0.34
cpe:2.3:a:libpng:libpng:1.0.35:*:*:*:*:*:*:* libpng == None == 1.0.35
cpe:2.3:a:libpng:libpng:1.0.37:*:*:*:*:*:*:* libpng == None == 1.0.37
cpe:2.3:a:libpng:libpng:1.0.38:*:*:*:*:*:*:* libpng == None == 1.0.38
cpe:2.3:a:libpng:libpng:1.0.39:*:*:*:*:*:*:* libpng == None == 1.0.39
cpe:2.3:a:libpng:libpng:1.0.40:*:*:*:*:*:*:* libpng == None == 1.0.40
cpe:2.3:a:libpng:libpng:1.0.41:*:*:*:*:*:*:* libpng == None == 1.0.41
cpe:2.3:a:libpng:libpng:1.0.42:*:*:*:*:*:*:* libpng == None == 1.0.42
cpe:2.3:a:libpng:libpng:1.0.43:*:*:*:*:*:*:* libpng == None == 1.0.43
cpe:2.3:a:libpng:libpng:1.0.44:*:*:*:*:*:*:* libpng == None == 1.0.44
cpe:2.3:a:libpng:libpng:1.0.45:*:*:*:*:*:*:* libpng == None == 1.0.45
cpe:2.3:a:libpng:libpng:1.0.46:*:*:*:*:*:*:* libpng == None == 1.0.46
cpe:2.3:a:libpng:libpng:1.0.47:*:*:*:*:*:*:* libpng == None == 1.0.47
cpe:2.3:a:libpng:libpng:1.0.48:*:*:*:*:*:*:* libpng == None == 1.0.48
cpe:2.3:a:libpng:libpng:1.0.50:*:*:*:*:*:*:* libpng == None == 1.0.50
cpe:2.3:a:libpng:libpng:1.0.51:*:*:*:*:*:*:* libpng == None == 1.0.51
cpe:2.3:a:libpng:libpng:1.0.52:*:*:*:*:*:*:* libpng == None == 1.0.52
cpe:2.3:a:libpng:libpng:1.0.53:*:*:*:*:*:*:* libpng == None == 1.0.53
cpe:2.3:a:libpng:libpng:1.0.54:*:*:*:*:*:*:* libpng == None == 1.0.54
cpe:2.3:a:libpng:libpng:1.0.55:*:*:*:*:*:*:* libpng == None == 1.0.55
cpe:2.3:a:libpng:libpng:1.0.56:*:*:*:*:*:*:* libpng == None == 1.0.56
cpe:2.3:a:libpng:libpng:1.0.57:*:*:*:*:*:*:* libpng == None == 1.0.57
cpe:2.3:a:libpng:libpng:1.0.58:*:*:*:*:*:*:* libpng == None == 1.0.58
cpe:2.3:a:libpng:libpng:1.0.59:*:*:*:*:*:*:* libpng == None == 1.0.59
cpe:2.3:a:libpng:libpng:1.0.60:*:*:*:*:*:*:* libpng == None == 1.0.60
cpe:2.3:a:libpng:libpng:1.0.61:*:*:*:*:*:*:* libpng == None == 1.0.61
cpe:2.3:a:libpng:libpng:1.0.62:*:*:*:*:*:*:* libpng == None == 1.0.62
cpe:2.3:a:libpng:libpng:1.0.63:*:*:*:*:*:*:* libpng == None == 1.0.63
cpe:2.3:a:libpng:libpng:1.0.64:*:*:*:*:*:*:* libpng == None == 1.0.64
cpe:2.3:a:libpng:libpng:1.0.65:*:*:*:*:*:*:* libpng == None == 1.0.65
cpe:2.3:a:libpng:libpng:1.0.66:*:*:*:*:*:*:* libpng == None == 1.0.66

Vulnerable and fixed packages

Source package Branch Version Maintainer Status