CVE-2016-2191

MEDIUM

OptiPNG - Denial of Service via Crafted BMP Image Delta Escapes

Title source: llm
STIX 2.1

Description

The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.

References (10)

Core 10
Core References
Patch x_refsource_confirm
https://sourceforge.net/p/optipng/bugs/59/
Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/04/04/2
Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2016-04/msg00065.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2016/dsa-3546
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2951-1
Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2016-04/msg00061.html
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/537972/100/0/threaded
Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2016/Apr/15
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201608-01

Scores

CVSS v3 6.5
EPSS 0.0174
EPSS Percentile 82.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-119
Status published
Products (8)
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 15.04
debian/debian_linux 7.0
debian/debian_linux 8.0
opensuse/leap 42.1
opensuse/opensuse 13.2
optipng/optipng 0.7.2
Published Apr 13, 2016
Tracked Since Feb 18, 2026