CVE:CVE-2015-8540
CNNVD:CNNVD-201602-332
libpng是一个可对PNG图形文件实现创建、读写等操作的PNG参考库。
libpng的pngwutil.c文件中的‘png_check_keyword’函数中存在整数溢出漏洞。远程攻击者可通过将空格作为PNG图像中的关键字利用该漏洞在受影响应用程序上下文中执行任意代码，也可能造成拒绝服务。
solution:Upgrade redhat enterprise_linux_desktop_supplementary to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_supplementary to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_workstation_supplementary to a higher version than 6.0,and avoid the version 6.0; Upgrade libpng libpng to a higher version than 1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,1.2.11,1.2.12,1.2.13,1.2.14,1.2.15,1.2.16,1.2.17,1.2.18,1.2.19,1.2.20,1.2.21,1.2.22,1.2.23,1.2.24,1.2.25,1.2.26,1.2.27,1.2.28,1.2.29,1.2.30,1.2.31,1.2.32,1.2.33,1.2.34,1.2.35,1.2.36,1.2.37,1.2.38,1.2.39,1.2.40,1.2.41,1.2.42,1.2.43,1.2.43:devel,1.2.44,1.2.45,1.2.45:devel,1.2.46,1.2.46:devel,1.2.47,1.2.47:beta,1.2.48,1.2.48:betas,1.2.49,1.2.50,1.2.51,1.2.52,1.2.53,1.2.54,1.2.55,1.1.1,1.0.0,1.0.1,1.0.2,1.0.3,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.0.13,1.0.14,1.0.15,1.0.16,1.0.17,1.0.18,1.0.19,1.0.20,1.0.21,1.0.22,1.0.23,1.0.24,1.0.25,1.0.26,1.0.27,1.0.28,1.0.29,1.0.30,1.0.31,1.0.32,1.0.33,1.0.34,1.0.35,1.0.37,1.0.38,1.0.39,1.0.40,1.0.41,1.0.42,1.0.43,1.0.44,1.0.45,1.0.46,1.0.47,1.0.48,1.0.50,1.0.51,1.0.52,1.0.53,1.0.54,1.0.55,1.0.55:rc01,1.0.56,1.0.56:devel,1.0.57,1.0.57:rc01,1.0.58,1.0.59,1.0.60,1.0.61,1.0.62,1.0.63,1.0.64,1.0.65,1.4.0,1.4.1,1.4.2,1.4.3,1.4.4,1.4.5,1.4.6,1.4.7,1.4.8,1.4.9,1.4.10,1.4.11,1.4.12,1.4.13,1.4.14,1.4.15,1.4.16,1.4.17,1.4.18,0.90,0.95,0.96,0.97,0.98,0.99,1.5.0:beta,1.5.1,1.5.1:beta,1.5.2,1.5.2:beta,1.5.3:beta,1.5.4,1.5.4:beta,1.5.5,1.5.5:beta,1.5.6,1.5.6:beta,1.5.7,1.5.7:beta,1.5.8,1.5.8:beta,1.5.9,1.5.9:beta,1.5.10:beta,1.5.11,1.5.11:beta,1.5.12,1.5.13,1.5.13:beta,1.5.14,1.5.15,1.5.16,1.5.17,1.5.18,1.5.19,1.5.20:beta,1.5.21,1.5.22,1.5.23,1.5.24,1.5.25,1.3.0,and avoid the version 1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,1.2.11,1.2.12,1.2.13,1.2.14,1.2.15,1.2.16,1.2.17,1.2.18,1.2.19,1.2.20,1.2.21,1.2.22,1.2.23,1.2.24,1.2.25,1.2.26,1.2.27,1.2.28,1.2.29,1.2.30,1.2.31,1.2.32,1.2.33,1.2.34,1.2.35,1.2.36,1.2.37,1.2.38,1.2.39,1.2.40,1.2.41,1.2.42,1.2.43,1.2.43:devel,1.2.44,1.2.45,1.2.45:devel,1.2.46,1.2.46:devel,1.2.47,1.2.47:beta,1.2.48,1.2.48:betas,1.2.49,1.2.50,1.2.51,1.2.52,1.2.53,1.2.54,1.2.55,1.1.1,1.0.0,1.0.1,1.0.2,1.0.3,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.0.13,1.0.14,1.0.15,1.0.16,1.0.17,1.0.18,1.0.19,1.0.20,1.0.21,1.0.22,1.0.23,1.0.24,1.0.25,1.0.26,1.0.27,1.0.28,1.0.29,1.0.30,1.0.31,1.0.32,1.0.33,1.0.34,1.0.35,1.0.37,1.0.38,1.0.39,1.0.40,1.0.41,1.0.42,1.0.43,1.0.44,1.0.45,1.0.46,1.0.47,1.0.48,1.0.50,1.0.51,1.0.52,1.0.53,1.0.54,1.0.55,1.0.55:rc01,1.0.56,1.0.56:devel,1.0.57,1.0.57:rc01,1.0.58,1.0.59,1.0.60,1.0.61,1.0.62,1.0.63,1.0.64,1.0.65,1.4.0,1.4.1,1.4.2,1.4.3,1.4.4,1.4.5,1.4.6,1.4.7,1.4.8,1.4.9,1.4.10,1.4.11,1.4.12,1.4.13,1.4.14,1.4.15,1.4.16,1.4.17,1.4.18,0.90,0.95,0.96,0.97,0.98,0.99,1.5.0:beta,1.5.1,1.5.1:beta,1.5.2,1.5.2:beta,1.5.3:beta,1.5.4,1.5.4:beta,1.5.5,1.5.5:beta,1.5.6,1.5.6:beta,1.5.7,1.5.7:beta,1.5.8,1.5.8:beta,1.5.9,1.5.9:beta,1.5.10:beta,1.5.11,1.5.11:beta,1.5.12,1.5.13,1.5.13:beta,1.5.14,1.5.15,1.5.16,1.5.17,1.5.18,1.5.19,1.5.20:beta,1.5.21,1.5.22,1.5.23,1.5.24,1.5.25,1.3.0; Upgrade fedoraproject fedora to a higher version than 23,and avoid the version 23; Upgrade debian debian_linux to a higher version than 6.0,and avoid the version 6.0