CVE:CVE-2018-13785
CNNVD:CNNVD-201807-499
libpng是一个可对PNG图形文件实现创建、读写等操作的PNG参考库。
libpng 1.6.34版本中‘png_check_chunk_length’函数(pngrutil.c文件)存在输入验证错误漏洞。攻击者可借助特制的PNG文件利用该漏洞造成拒绝服务。
solution:Upgrade libpng libpng to a higher version than 1.6.34,and avoid the version 1.6.34; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,18.04,and avoid the version 14.04,16.04,17.10,18.04; Upgrade oracle jdk to a higher version than 1.6.0:update201,1.7.0:update191,1.8.0:update181,11.0.0,and avoid the version 1.6.0:update201,1.7.0:update191,1.8.0:update181,11.0.0; Upgrade oracle jre to a higher version than 1.6.0:update201,1.7.0:update191,1.8.0:update181,11.0.0,and avoid the version 1.6.0:update201,1.7.0:update191,1.8.0:update181,11.0.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0