Vulnerability Bulletins |
Múltiples denegaciones de servicio en libpng |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Denegación de Servicio |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | GNU/Linux |
| Affected software |
libpng < 1.0.29 libpng 1.2.x < 1.2.21 |
Description |
|
|
Se han encontrado múltiples denegaciones de servicio en libpng. Las vulnerabilidades son descritas a continuación. - CVE-2007-5266: Se ha encontrado una vulnerabilidad en libpng en las versiones anteriores a la 1.0.29 beta1 y en la versión 1.2.x anteriores a la 1.2.21 beta1. La vulnerabilidad reside en un error en la manipulación de ICC del perfil en el archivo pngset.c en la función png_set_iCCP. Un atacante remoto podría causar una denegación de servicio mediante una imagen PNG especialmente diseñada que impide que un nombre de un campo termine en NULL. - CVE-2007-5268: Se ha encontrado una vulnerabilidad en libpng en las versiones anteriores a la 1.0.29 y en la versión 1.2.x anteriores a la 1.2.21 en el archivo pngrtran.c. La vulnerabilidad reside en el uso de operaciones lógicas en lugar de utilizar operaciones bit a bit y al realizar comparaciones incorrectas. Un atacante remoto podría causar una denegación de servicio mediante una imagen PNG especialmente diseñada. - CVE-2007-5269: Se ha encontrado una vulnerabilidad en libpng en las versiones anteriores a la 1.0.29 y en la versión 1.2.x anteriores a la 1.2.21. La vulnerabilidad reside en un error en ciertos manipuladores de fragmentos de información que provocan operaciones de lectura fuera de los límites de memoria. Un atacante remoto podría causar una denegación de servicio mediante fragmentos de información pCAL sCAL, tEXt, iTXt y ztXT especialmente diseñados en imágenes PNG. |
|
Solution |
|
|
Actualización de software Mandriva (MDKSA-2007:217) Corporate Server 3.0 X86 corporate/3.0/i586/libpng3-1.2.5-10.9.C30mdk.i586.rpm corporate/3.0/i586/libpng3-devel-1.2.5-10.9.C30mdk.i586.rpm corporate/3.0/i586/libpng3-static-devel-1.2.5-10.9.C30mdk.i586.rpm corporate/3.0/SRPMS/libpng-1.2.5-10.9.C30mdk.src.rpm X86_64 corporate/3.0/x86_64/lib64png3-1.2.5-10.9.C30mdk.x86_64.rpm corporate/3.0/x86_64/lib64png3-devel-1.2.5-10.9.C30mdk.x86_64.rpm corporate/3.0/x86_64/lib64png3-static-devel-1.2.5-10.9.C30mdk.x86_64.rpm corporate/3.0/x86_64/libpng3-1.2.5-10.9.C30mdk.i586.rpm corporate/3.0/SRPMS/libpng-1.2.5-10.9.C30mdk.src.rpm Multi Network Firewall 2.0 X86 mnf/2.0/i586/libpng3-1.2.5-10.9.M20mdk.i586.rpm mnf/2.0/i586/libpng3-devel-1.2.5-10.9.M20mdk.i586.rpm mnf/2.0/i586/libpng3-static-devel-1.2.5-10.9.M20mdk.i586.rpm mnf/2.0/SRPMS/libpng-1.2.5-10.9.M20mdk.src.rpm Mandriva Linux 2007 X86 2007.0/i586/libpng3-1.2.12-2.4mdv2007.0.i586.rpm 2007.0/i586/libpng3-devel-1.2.12-2.4mdv2007.0.i586.rpm 2007.0/i586/libpng3-static-devel-1.2.12-2.4mdv2007.0.i586.rpm 2007.0/SRPMS/libpng-1.2.12-2.4mdv2007.0.src.rpm X86_64 2007.0/x86_64/lib64png3-1.2.12-2.4mdv2007.0.x86_64.rpm 2007.0/x86_64/lib64png3-devel-1.2.12-2.4mdv2007.0.x86_64.rpm 2007.0/x86_64/lib64png3-static-devel-1.2.12-2.4mdv2007.0.x86_64.rpm 2007.0/SRPMS/libpng-1.2.12-2.4mdv2007.0.src.rpm Corporate Server 4.0 X86 corporate/4.0/i586/libpng3-1.2.8-1.4.20060mlcs4.i586.rpm corporate/4.0/i586/libpng3-devel-1.2.8-1.4.20060mlcs4.i586.rpm corporate/4.0/i586/libpng3-static-devel-1.2.8-1.4.20060mlcs4.i586.rpm corporate/4.0/SRPMS/libpng-1.2.8-1.4.20060mlcs4.src.rpm X86_64 corporate/4.0/x86_64/lib64png3-1.2.8-1.4.20060mlcs4.x86_64.rpm corporate/4.0/x86_64/lib64png3-devel-1.2.8-1.4.20060mlcs4.x86_64.rpm corporate/4.0/x86_64/lib64png3-static-devel-1.2.8-1.4.20060mlcs4.x86_64.rpm corporate/4.0/x86_64/libpng3-1.2.8-1.4.20060mlcs4.i586.rpm corporate/4.0/x86_64/libpng3-devel-1.2.8-1.4.20060mlcs4.i586.rpm corporate/4.0/SRPMS/libpng-1.2.8-1.4.20060mlcs4.src.rpm Mandriva Linux 2007.1 X86 2007.1/i586/libpng3-1.2.13-2.2mdv2007.1.i586.rpm 2007.1/i586/libpng3-devel-1.2.13-2.2mdv2007.1.i586.rpm 2007.1/i586/libpng3-static-devel-1.2.13-2.2mdv2007.1.i586.rpm 2007.1/SRPMS/libpng-1.2.13-2.2mdv2007.1.src.rpm X86_64 2007.1/x86_64/lib64png3-1.2.13-2.2mdv2007.1.x86_64.rpm 2007.1/x86_64/lib64png3-devel-1.2.13-2.2mdv2007.1.x86_64.rpm 2007.1/x86_64/lib64png3-static-devel-1.2.13-2.2mdv2007.1.x86_64.rpm 2007.1/SRPMS/libpng-1.2.13-2.2mdv2007.1.src.rpm Mandriva Linux 2008.0 X86 2008.0/i586/libpng-devel-1.2.22-0.1mdv2008.0.i586.rpm 2008.0/i586/libpng-source-1.2.22-0.1mdv2008.0.i586.rpm 2008.0/i586/libpng-static-devel-1.2.22-0.1mdv2008.0.i586.rpm 2008.0/i586/libpng3-1.2.22-0.1mdv2008.0.i586.rpm 2008.0/SRPMS/libpng-1.2.22-0.1mdv2008.0.src.rpm X86_64 2008.0/x86_64/lib64png-devel-1.2.22-0.1mdv2008.0.x86_64.rpm 2008.0/x86_64/lib64png-static-devel-1.2.22-0.1mdv2008.0.x86_64.rpm 2008.0/x86_64/lib64png3-1.2.22-0.1mdv2008.0.x86_64.rpm 2008.0/x86_64/libpng-source-1.2.22-0.1mdv2008.0.x86_64.rpm 2008.0/SRPMS/libpng-1.2.22-0.1mdv2008.0.src.rpm Suse Linux Las actualizaciones pueden descargarse mediante YAST o del servidor FTP oficial de Suse Linux. Debian (DSA-1750-1) Debian Linux 4.0 Source http://security.debian.org/pool/updates/main/libp/libpng/libpng_1.2.15~beta5.orig.tar.gz http://security.debian.org/pool/updates/main/libp/libpng/libpng_1.2.15~beta5-1+etch2.diff.gz http://security.debian.org/pool/updates/main/libp/libpng/libpng_1.2.15~beta5-1+etch2.dsc Arquitectura independiente: http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.15~beta5-1+etch2_all.deb alpha (DEC Alpha) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.15~beta5-1+etch2_alpha.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.15~beta5-1+etch2_alpha.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.15~beta5-1+etch2_alpha.udeb amd64 (AMD x86_64 (AMD64)) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.15~beta5-1+etch2_amd64.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.15~beta5-1+etch2_amd64.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.15~beta5-1+etch2_amd64.udeb arm (ARM) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.15~beta5-1+etch2_arm.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.15~beta5-1+etch2_arm.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.15~beta5-1+etch2_arm.deb hppa (HP PA RISC) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.15~beta5-1+etch2_hppa.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.15~beta5-1+etch2_hppa.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.15~beta5-1+etch2_hppa.deb i386 (Intel ia32) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.15~beta5-1+etch2_i386.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.15~beta5-1+etch2_i386.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.15~beta5-1+etch2_i386.deb ia64 (Intel ia64) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.15~beta5-1+etch2_ia64.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.15~beta5-1+etch2_ia64.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.15~beta5-1+etch2_ia64.deb mips (MIPS (Big Endian)) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.15~beta5-1+etch2_mips.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.15~beta5-1+etch2_mips.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.15~beta5-1+etch2_mips.udeb mipsel (MIPS (Little Endian)) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.15~beta5-1+etch2_mipsel.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.15~beta5-1+etch2_mipsel.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.15~beta5-1+etch2_mipsel.deb powerpc (PowerPC) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.15~beta5-1+etch2_powerpc.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.15~beta5-1+etch2_powerpc.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.15~beta5-1+etch2_powerpc.udeb s390 (IBM S/390) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.15~beta5-1+etch2_s390.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.15~beta5-1+etch2_s390.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.15~beta5-1+etch2_s390.udeb sparc (Sun SPARC/UltraSPARC) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.15~beta5-1+etch2_sparc.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.15~beta5-1+etch2_sparc.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.15~beta5-1+etch2_sparc.deb Debian (DSA-1750-1) Debian Linux 5.0 Source http://security.debian.org/pool/updates/main/libp/libpng/libpng_1.2.27-2+lenny2.diff.gz http://security.debian.org/pool/updates/main/libp/libpng/libpng_1.2.27.orig.tar.gz http://security.debian.org/pool/updates/main/libp/libpng/libpng_1.2.27-2+lenny2.dsc Arquitectura independiente: http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.27-2+lenny2_all.deb alpha (DEC Alpha) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.27-2+lenny2_alpha.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.27-2+lenny2_alpha.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.27-2+lenny2_alpha.udeb amd64 (AMD x86_64 (AMD64)) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.27-2+lenny2_amd64.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.27-2+lenny2_amd64.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.27-2+lenny2_amd64.deb arm (ARM) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.27-2+lenny2_arm.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.27-2+lenny2_arm.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.27-2+lenny2_arm.deb armel (ARM EABI) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.27-2+lenny2_armel.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.27-2+lenny2_armel.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.27-2+lenny2_armel.deb hppa (HP PA RISC) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.27-2+lenny2_hppa.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.27-2+lenny2_hppa.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.27-2+lenny2_hppa.udeb i386 (Intel ia32) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.27-2+lenny2_i386.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.27-2+lenny2_i386.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.27-2+lenny2_i386.deb ia64 (Intel ia64) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.27-2+lenny2_ia64.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.27-2+lenny2_ia64.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.27-2+lenny2_ia64.udeb mips (MIPS (Big Endian)) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.27-2+lenny2_mips.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.27-2+lenny2_mips.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.27-2+lenny2_mips.deb mipsel (MIPS (Little Endian)) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.27-2+lenny2_mipsel.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.27-2+lenny2_mipsel.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.27-2+lenny2_mipsel.deb powerpc (PowerPC) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.27-2+lenny2_powerpc.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.27-2+lenny2_powerpc.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.27-2+lenny2_powerpc.deb s390 (IBM S/390) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.27-2+lenny2_s390.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.27-2+lenny2_s390.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.27-2+lenny2_s390.deb sparc (Sun SPARC/UltraSPARC) http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-udeb_1.2.27-2+lenny2_sparc.udeb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_1.2.27-2+lenny2_sparc.deb http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1.2.27-2+lenny2_sparc.deb Sun (259989) Para Solaris 8 y 9 no existe parche oficial para esta vulnerabilidad. Solaris 10 / SPARC / patch 137080-02 Solaris 10 / x86 / patch 137080-03 OpenSolaris / upon builds snv_113 o posterior http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage |
|
Standar resources |
|
| Property | Value |
| CVE |
CVE-2007-5266 CVE-2007-5268 CVE-2007-5269 |
| BID |
25956 25957 |
Other resources |
|
|
Mandriva Security Advisory (MDKSA-2007:217) http://www.mandriva.com/security/advisories?name=MDKSA-2007:217 SUSE Security Summary Report (SUSE-SR:2007:025) http://www.novell.com/linux/security/advisories/2007_25_sr.html Debian Security Advisory (DSA-1750-1) http://lists.debian.org/debian-security-announce/2009/msg00060.html Sun Alert Notification (259989) http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2007-11-15 |
| 1.1 | Aviso emitido por Suse (SUSE-SR:2007:025) | 2007-12-10 |
| 1.2 | Aviso emitido por Debian (DSA-1750-1) | 2009-03-23 |
| 1.3 | Aviso emitido por Sun (259989) | 2009-06-03 |