It was discovered that the png_get_PLTE() and png_set_PLTE() functions of libpng did not correctly calculate the maximum palette sizes for bit depths of less than 8. In case an application tried to use these functions in combination with properly calculated palette sizes, this could lead to a buffer overflow or out-of-bounds reads. An attacker could exploit this to cause a crash or potentially execute arbitrary code by tricking an unsuspecting user into processing a specially crafted PNG image. However, the exact impact is dependent on the application using the library.
Find out more about CVE-2015-8126 from the MITRE CVE dictionary dictionary and NIST NVD.
| Base Score | 5.1 |
|---|---|
| Base Metrics | AV:N/AC:H/Au:N/C:P/I:P/A:P |
| Access Vector | Network |
| Access Complexity | High |
| Authentication | None |
| Confidentiality Impact | Partial |
| Integrity Impact | Partial |
| Availability Impact | Partial |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
| Platform | Errata | Release Date |
|---|---|---|
| Oracle Java for Red Hat Enterprise Linux 7 (java-1.7.0-oracle) | RHSA-2016:0056 | 2016-01-21 |
| Oracle Java for Red Hat Enterprise Linux 6 (java-1.7.0-oracle) | RHSA-2016:0056 | 2016-01-21 |
| Oracle Java for Red Hat Enterprise Linux 6 (java-1.8.0-oracle) | RHSA-2016:0055 | 2016-01-21 |
| Red Hat Enterprise Linux Supplementary 5 (java-1.6.0-ibm) | RHSA-2016:0101 | 2016-02-02 |
| Red Hat Enterprise Linux 6 (libpng) | RHSA-2015:2594 | 2015-12-09 |
| Oracle Java for Red Hat Enterprise Linux 7 (java-1.6.0-sun) | RHSA-2016:0057 | 2016-01-21 |
| Red Hat Enterprise Linux 7 (libpng12) | RHSA-2015:2595 | 2015-12-09 |
| Red Hat Enterprise Linux Supplementary (v. 7) (java-1.8.0-ibm) | RHSA-2016:0098 | 2016-02-02 |
| Red Hat Enterprise Linux Supplementary (v. 6) (java-1.6.0-ibm) | RHSA-2016:0101 | 2016-02-02 |
| Red Hat Enterprise Linux 7 (libpng) | RHSA-2015:2596 | 2015-12-09 |
| Red Hat Enterprise Linux Supplementary (v. 7) (java-1.7.1-ibm) | RHSA-2016:0099 | 2016-02-02 |
| Red Hat Satellite 5.6 (RHEL v.6) (java-1.7.1-ibm) | RHSA-2016:1430 | 2016-07-18 |
| Oracle Java for Red Hat Enterprise Linux 5 (java-1.6.0-sun) | RHSA-2016:0057 | 2016-01-21 |
| Oracle Java for Red Hat Enterprise Linux 5 (java-1.7.0-oracle) | RHSA-2016:0056 | 2016-01-21 |
| Red Hat Satellite 5.7 (RHEL v.6) (java-1.7.1-ibm) | RHSA-2016:1430 | 2016-07-18 |
| Oracle Java for Red Hat Enterprise Linux 6 (java-1.6.0-sun) | RHSA-2016:0057 | 2016-01-21 |
| Red Hat Enterprise Linux Supplementary (v. 6) (java-1.7.1-ibm) | RHSA-2016:0099 | 2016-02-02 |
| Oracle Java for Red Hat Enterprise Linux 7 (java-1.8.0-oracle) | RHSA-2016:0055 | 2016-01-21 |
| Red Hat Satellite 5.6 (RHEL v.5) (java-1.7.0-ibm) | RHSA-2016:1430 | 2016-07-18 |
| Red Hat Enterprise Linux Supplementary 5 (java-1.7.0-ibm) | RHSA-2016:0100 | 2016-02-02 |
| Platform | Package | State |
|---|---|---|
| Red Hat Enterprise Linux 5 | libpng | Will not fix |
Vulmon