CVE:CVE-2015-8126
CNNVD:CNNVD-201511-246
libpng是一个可对PNG图形文件实现创建、读写等操作的PNG参考库。
libpng的‘png_set_PLTE’和‘png_get_PLTE’函数中存在缓冲区错误漏洞。远程攻击者可借助PNG图像中的IHDR数据块中较小的‘bit-depth’值利用该漏洞造成拒绝服务（应用程序崩溃）。
solution:Upgrade libpng libpng to a higher version than 1.0.64,1.2.54,1.4.17,1.5.24,1.6.19,and avoid the version (,1.0.64),[1.1.1,1.2.54),[1.3.0,1.4.17),[1.5.0,1.5.24),[1.6.0,1.6.19); Upgrade fedoraproject fedora to a higher version than 21,22,23,and avoid the version 21,22,23; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp3,11:sp4,12,12:sp1,and avoid the version 11:sp3,11:sp4,12,12:sp1; Upgrade suse linux_enterprise_server to a higher version than 12,12:sp1,and avoid the version 12,12:sp1; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade redhat satellite to a higher version than 5.7,5.6,and avoid the version 5.7,5.6; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.7,7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 6.7,7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,7.3,7.4,7.6,7.7,and avoid the version 7.2,7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.2,7.3,7.6,7.7,and avoid the version 7.2,7.3,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade oracle jdk to a higher version than 1.6.0:update105,1.7.0:update91,1.8.0:update65,1.8.0:update66,and avoid the version 1.6.0:update105,1.7.0:update91,1.8.0:update65,1.8.0:update66; Upgrade oracle jre to a higher version than 1.6.0:update105,1.7.0:update91,1.8.0:update65,1.8.0:update66,and avoid the version 1.6.0:update105,1.7.0:update91,1.8.0:update65,1.8.0:update66; Upgrade oracle linux to a higher version than 6,7,and avoid the version 6,7; Upgrade oracle solaris to a higher version than 11.3,and avoid the version 11.3; Upgrade apple mac_os_x to a higher version than 10.11.4,and avoid the version (,10.11.4); Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,15.10,and avoid the version 12.04,14.04,15.04,15.10