CVE-2013-6954

MEDIUM

libpng < 1.6.8 - Denial of Service via PLTE Chunk NULL Pointer Dereference

Title source: llm
STIX 2.1

Description

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.

References (25)

Core 25
Core References
Various Sources x_refsource_confirm
https://www.ibm.com/support/docview.wss?uid=swg21675973
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21672080
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21676746
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2014:0414
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201406-32.xml
Third Party Advisory x_refsource_confirm
http://advisories.mageia.org/MGASA-2014-0075.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128098.html
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-01/msg00071.html
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=140852886808946&w=2
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/650142
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2014:0413
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59058
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=140852974709252&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/64493
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/58974
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1045561
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2014:035
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127947.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128099.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127952.html
Various Sources x_refsource_misc
http://www.libpng.org/pub/png/libpng.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128114.html

Scores

CVSS v3 6.5
EPSS 0.0469
EPSS Percentile 90.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (9)
libpng/libpng 1.6.0 (2 CPE variants)
libpng/libpng 1.6.1 (2 CPE variants)
libpng/libpng 1.6.2 (2 CPE variants)
libpng/libpng 1.6.3 (2 CPE variants)
libpng/libpng 1.6.4 (2 CPE variants)
libpng/libpng 1.6.5
libpng/libpng 1.6.6
libpng/libpng 1.6.7 (2 CPE variants)
libpng/libpng < 1.6.8
Published Jan 12, 2014
Tracked Since Feb 18, 2026