CVE:CVE-2019-7317
CNNVD:CNNVD-201902-012
libpng是一个可对PNG图形文件实现创建、读写等操作的PNG参考库。
libpng 1.6.37之前的1.6.x版本中的png.c文件的‘png_image_free’函数存在资源管理错误漏洞。攻击者可借助特制的文件利用该漏洞造成拒绝服务。
solution:Upgrade libpng libpng to a higher version than 1.6.37,and avoid the version [1.6.0,1.6.37); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,19.04,and avoid the version 16.04,18.04,18.10,19.04; Upgrade oracle hyperion_infrastructure_technology to a higher version than 11.2.6.0,and avoid the version 11.2.6.0; Upgrade oracle java_se to a higher version than 7u221,8u212,and avoid the version 7u221,8u212; Upgrade oracle jdk to a higher version than 11.0.3,12.0.1,and avoid the version 11.0.3,12.0.1; Upgrade oracle mysql to a higher version than 8.0.23,and avoid the version (,8.0.23); Upgrade hp xp7_command_view to a higher version than 8.7.0-00,and avoid the version (,8.7.0-00); Upgrade hpe xp7_command_view_advanced_edition_suite to a higher version than 8.7.0-00,and avoid the version (,8.7.0-00); Upgrade mozilla firefox_esr to a higher version than -; Upgrade mozilla thunderbird to a higher version than -; Upgrade opensuse leap to a higher version than 15.0,15.1,42.3,and avoid the version 15.0,15.1,42.3; Upgrade opensuse package_hub to a higher version than -; Upgrade netapp active_iq_unified_manager to a higher version than 9.6,9.6,and avoid the version (,9.6),9.6; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp e-series_santricity_management to a higher version than -; Upgrade netapp e-series_santricity_storage_manager to a higher version than 11.53,and avoid the version (,11.53); Upgrade netapp e-series_santricity_unified_manager to a higher version than 3.2,and avoid the version (,3.2); Upgrade netapp e-series_santricity_web_services to a higher version than 4.0,and avoid the version (,4.0); Upgrade netapp oncommand_insight to a higher version than 7.3.9,and avoid the version (,7.3.9); Upgrade netapp oncommand_workflow_automation to a higher version than 5.1,and avoid the version (,5.1); Upgrade netapp plug-in_for_symantec_netbackup to a higher version than -; Upgrade netapp snapmanager to a higher version than 3.4.2,3.4.2:p1,and avoid the version (,3.4.2),3.4.2:p1; Upgrade netapp steelstore to a higher version than -; Upgrade redhat satellite to a higher version than 5.8,and avoid the version 5.8; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,8.0,and avoid the version 6.0,7.0,8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 6.0,7.0,8.0,and avoid the version 6.0,7.0,8.0; Upgrade redhat enterprise_linux_for_power_big_endian to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_for_power_little_endian to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_for_scientific_computing to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0