CVE-2015-2158 — Off-by-one Error in Project Pngcrush

CWE-189CWE-193 — Off-by-one ErrorCWE-787 — Out-of-bounds Write9 documents7 sources
Severity
7.8HIGHNVD
EPSS
0.4%
top 38.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Pngcrush Project PngcrushDebian PngcrushMsrc Azl3 Fltk 1.3.8-1 ON Azure Linux 3.0+7 more
Timeline
PublishedOct 6
Latest updateMay 17

Description

Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages10 packages

Patches

Patch: www.openwall.com ↗Patch: bugzilla.redhat.com ↗Patch: sourceforge.net ↗

🔴Vulnerability Details

1
GHSA
GHSA-qm7x-p4cx-r7pj: Off-by-one error in the pngcrush_measure_idat function in pngcrush↗2022-05-17
▶

📋Vendor Advisories

3
Microsoft
Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service↗2017-10-10
▶
Red Hat
pngcrush: pngcrush_measure_idat() off-by-one error↗2015-01-28
▶
Debian
CVE-2015-2158: pngcrush - Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush...↗2015
▶

💬Community

4
HackerOne
pngcrush_measure_idat() off-by-one error (CVE-2015-2158)↗2019-10-04
▶
Bugzilla
CVE-2015-2158 pngcrush: buffer overflow potentially leading to code execution [fedora-all]↗2015-03-03
▶
Bugzilla
CVE-2015-2158 pngcrush: buffer overflow potentially leading to code execution [epel-all]↗2015-03-03
▶
Bugzilla
CVE-2015-2158 pngcrush: pngcrush_measure_idat() off-by-one error↗2015-03-03
▶