ID

VAR-201601-0495


CVE

CVE-2015-8472


TITLE

libpng of png_set_PLTE Buffer overflow vulnerability in functions

Trust: 0.8

sources: JVNDB: JVNDB-2015-006846

DESCRIPTION

Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126. libpng of png_set_PLTE The function contains a buffer overflow vulnerability. libpng is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code on the affected system. Failed attacks will cause denial-of-service conditions. Note: This issue is the result of an incomplete fix for the issue described in 77568 (libpng CVE-2015-8126 Multiple Heap Based Buffer Overflow Vulnerabilities). The following versions are affected: libpng prior to 1.0.65, 1.1.x and 1.2.x prior to 1.2.55, 1.3.x, 1.4.x prior to 1.4.18, 1.5.x prior to 1.5.25, 1.6 1.6.x versions prior to .20. 6) - i386, x86_64 3. Description: IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security alerts page, listed in the References section. (CVE-2015-5041, CVE-2015-7575, CVE-2015-7981, CVE-2015-8126, CVE-2015-8472, CVE-2015-8540, CVE-2016-0402, CVE-2016-0448, CVE-2016-0466, CVE-2016-0483, CVE-2016-0494) Note: This update also disallows the use of the MD5 hash algorithm in the certification path processing. The use of MD5 can be re-enabled by removing MD5 from the jdk.certpath.disabledAlgorithms security property defined in the java.security file. All running instances of IBM Java must be restarted for the update to take effect. Bugs fixed (https://bugzilla.redhat.com/): 1276416 - CVE-2015-7981 libpng: Out-of-bounds read in png_convert_to_rfc1123 1281756 - CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions 1289841 - CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH) 1291312 - CVE-2015-8540 libpng: underflow read in png_check_keyword() 1298906 - CVE-2016-0494 ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543) 1298957 - CVE-2016-0402 OpenJDK: URL deserialization inconsistencies (Networking, 8059054) 1299073 - CVE-2016-0448 OpenJDK: logging of RMI connection secrets (JMX, 8130710) 1299385 - CVE-2016-0466 OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962) 1299441 - CVE-2016-0483 OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017) 1302689 - CVE-2015-5041 IBM JDK: J9 JVM allows code to invoke non-public interface methods 6. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: libpng12 security update Advisory ID: RHSA-2015:2595-01 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-2595.html Issue date: 2015-12-09 CVE Names: CVE-2015-7981 CVE-2015-8126 CVE-2015-8472 ===================================================================== 1. Summary: Updated libpng12 packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - aarch64, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - aarch64, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: The libpng12 packages contain a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files. It was discovered that the png_get_PLTE() and png_set_PLTE() functions of libpng did not correctly calculate the maximum palette sizes for bit depths of less than 8. In case an application tried to use these functions in combination with properly calculated palette sizes, this could lead to a buffer overflow or out-of-bounds reads. An attacker could exploit this to cause a crash or potentially execute arbitrary code by tricking an unsuspecting user into processing a specially crafted PNG image. However, the exact impact is dependent on the application using the library. An attacker could possibly use this flaw to cause an out-of-bounds read by tricking an unsuspecting user into processing a specially crafted PNG image. (CVE-2015-7981) All libpng12 users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Package List: Red Hat Enterprise Linux Client (v. 7): Source: libpng12-1.2.50-7.el7_2.src.rpm x86_64: libpng12-1.2.50-7.el7_2.i686.rpm libpng12-1.2.50-7.el7_2.x86_64.rpm libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm libpng12-devel-1.2.50-7.el7_2.i686.rpm libpng12-devel-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: libpng12-1.2.50-7.el7_2.src.rpm x86_64: libpng12-1.2.50-7.el7_2.i686.rpm libpng12-1.2.50-7.el7_2.x86_64.rpm libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm libpng12-devel-1.2.50-7.el7_2.i686.rpm libpng12-devel-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: libpng12-1.2.50-7.el7_2.src.rpm aarch64: libpng12-1.2.50-7.el7_2.aarch64.rpm libpng12-debuginfo-1.2.50-7.el7_2.aarch64.rpm ppc64: libpng12-1.2.50-7.el7_2.ppc.rpm libpng12-1.2.50-7.el7_2.ppc64.rpm libpng12-debuginfo-1.2.50-7.el7_2.ppc.rpm libpng12-debuginfo-1.2.50-7.el7_2.ppc64.rpm ppc64le: libpng12-1.2.50-7.el7_2.ppc64le.rpm libpng12-debuginfo-1.2.50-7.el7_2.ppc64le.rpm s390x: libpng12-1.2.50-7.el7_2.s390.rpm libpng12-1.2.50-7.el7_2.s390x.rpm libpng12-debuginfo-1.2.50-7.el7_2.s390.rpm libpng12-debuginfo-1.2.50-7.el7_2.s390x.rpm x86_64: libpng12-1.2.50-7.el7_2.i686.rpm libpng12-1.2.50-7.el7_2.x86_64.rpm libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): aarch64: libpng12-debuginfo-1.2.50-7.el7_2.aarch64.rpm libpng12-devel-1.2.50-7.el7_2.aarch64.rpm ppc64: libpng12-debuginfo-1.2.50-7.el7_2.ppc.rpm libpng12-debuginfo-1.2.50-7.el7_2.ppc64.rpm libpng12-devel-1.2.50-7.el7_2.ppc.rpm libpng12-devel-1.2.50-7.el7_2.ppc64.rpm ppc64le: libpng12-debuginfo-1.2.50-7.el7_2.ppc64le.rpm libpng12-devel-1.2.50-7.el7_2.ppc64le.rpm s390x: libpng12-debuginfo-1.2.50-7.el7_2.s390.rpm libpng12-debuginfo-1.2.50-7.el7_2.s390x.rpm libpng12-devel-1.2.50-7.el7_2.s390.rpm libpng12-devel-1.2.50-7.el7_2.s390x.rpm x86_64: libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm libpng12-devel-1.2.50-7.el7_2.i686.rpm libpng12-devel-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: libpng12-1.2.50-7.el7_2.src.rpm x86_64: libpng12-1.2.50-7.el7_2.i686.rpm libpng12-1.2.50-7.el7_2.x86_64.rpm libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm libpng12-devel-1.2.50-7.el7_2.i686.rpm libpng12-devel-1.2.50-7.el7_2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-7981 https://access.redhat.com/security/cve/CVE-2015-8126 https://access.redhat.com/security/cve/CVE-2015-8472 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD4DBQFWaEOWXlSAg2UNWIIRArqQAJiXHpRTjePlByUwb2yeLtnA6ZHDAJ483rVP N/LWwsGEwId3XWZYVPOUSQ== =s2GT -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . (CVE-2015-4734, CVE-2015-4803, CVE-2015-4805, CVE-2015-4806, CVE-2015-4810, CVE-2015-4835, CVE-2015-4840, CVE-2015-4842, CVE-2015-4843, CVE-2015-4844, CVE-2015-4860, CVE-2015-4871, CVE-2015-4872, CVE-2015-4882, CVE-2015-4883, CVE-2015-4893, CVE-2015-4902, CVE-2015-4903, CVE-2015-5006, CVE-2015-5041, CVE-2015-7575, CVE-2015-7981, CVE-2015-8126, CVE-2015-8472, CVE-2015-8540, CVE-2016-0264, CVE-2016-0363, CVE-2016-0376, CVE-2016-0402, CVE-2016-0448, CVE-2016-0466, CVE-2016-0483, CVE-2016-0494, CVE-2016-0686, CVE-2016-0687, CVE-2016-3422, CVE-2016-3426, CVE-2016-3427, CVE-2016-3443, CVE-2016-3449) Red Hat would like to thank Andrea Palazzo of Truel IT for reporting the CVE-2015-4806 issue. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2016-03-21-5 OS X El Capitan 10.11.4 and Security Update 2016-002 OS X El Capitan 10.11.4 and Security Update 2016-002 is now available and addresses the following: apache_mod_php Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, and OS X El Capitan v10.11 to v10.11.3 Impact: Processing a maliciously crafted .png file may lead to arbitrary code execution Description: Multiple vulnerabilities existed in libpng versions prior to 1.6.20. These were addressed by updating libpng to version 1.6.20. CVE-ID CVE-2015-8126 : Adam Mariš CVE-2015-8472 : Adam Mariš AppleRAID Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed through improved input validation. CVE-ID CVE-2016-1733 : Proteas of Qihoo 360 Nirvan Team AppleRAID Available for: OS X El Capitan v10.11 to v10.11.3 Impact: A local user may be able to determine kernel memory layout Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed through improved input validation. CVE-ID CVE-2016-1732 : Proteas of Qihoo 360 Nirvan Team AppleUSBNetworking Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue existed in the parsing of data from USB devices. This issue was addressed through improved input validation. CVE-ID CVE-2016-1734 : Andrea Barisani and Andrej Rosano of Inverse Path Bluetooth Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to execute arbitrary code with kernel privileges Description: Multiple memory corruption issues were addressed through improved memory handling. CVE-ID CVE-2016-1735 : Jeonghoon Shin@A.D.D CVE-2016-1736 : beist and ABH of BoB Carbon Available for: OS X El Capitan v10.11 to v10.11.3 Impact: Processing a maliciously crafted .dfont file may lead to arbitrary code execution Description: Multiple memory corruption issues existed in the handling of font files. These issues were addressed through improved bounds checking. CVE-ID CVE-2016-1737 : an anonymous researcher dyld Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An attacker may tamper with code-signed applications to execute arbitrary code in the application's context Description: A code signing verification issue existed in dyld. This issue was addressed with improved validation. CVE-ID CVE-2016-1738 : beist and ABH of BoB FontParser Available for: OS X El Capitan v10.11 to v10.11.3 Impact: Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue was addressed through improved memory handling. CVE-ID CVE-2016-1740 : HappilyCoded (ant4g0nist and r3dsm0k3) working with Trend Micro's Zero Day Initiative (ZDI) HTTPProtocol Available for: OS X El Capitan v10.11 to v10.11.3 Impact: A remote attacker may be able to execute arbitrary code Description: Multiple vulnerabilities existed in nghttp2 versions prior to 1.6.0, the most serious of which may have led to remote code execution. These were addressed by updating nghttp2 to version 1.6.0. CVE-ID CVE-2015-8659 Intel Graphics Driver Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to execute arbitrary code with kernel privileges Description: Multiple memory corruption issues were addressed through improved memory handling. CVE-ID CVE-2016-1743 : Piotr Bania of Cisco Talos CVE-2016-1744 : Ian Beer of Google Project Zero IOFireWireFamily Available for: OS X El Capitan v10.11 to v10.11.3 Impact: A local user may be able to cause a denial of service Description: A null pointer dereference was addressed through improved validation. CVE-ID CVE-2016-1745 : sweetchip of Grayhash IOGraphics Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed through improved input validation. CVE-ID CVE-2016-1746 : Peter Pi of Trend Micro working with Trend Micro's Zero Day Initiative (ZDI) CVE-2016-1747 : Juwei Lin of Trend Micro working with Trend Micro's Zero Day Initiative (ZDI) IOHIDFamily Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to determine kernel memory layout Description: A memory corruption issue was addressed through improved memory handling. CVE-ID CVE-2016-1748 : Brandon Azad IOUSBFamily Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to execute arbitrary code with kernel privileges Description: Multiple memory corruption issues were addressed through improved memory handling. CVE-ID CVE-2016-1749 : Ian Beer of Google Project Zero and Juwei Lin of Trend Micro working with Trend Micro's Zero Day Initiative (ZDI) Kernel Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A use after free issue was addressed through improved memory management. CVE-ID CVE-2016-1750 : CESG Kernel Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A race condition existed during the creation of new processes. This was addressed through improved state handling. CVE-ID CVE-2016-1757 : Ian Beer of Google Project Zero and Pedro Vilaca Kernel Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A null pointer dereference was addressed through improved input validation. CVE-ID CVE-2016-1756 : Lufeng Li of Qihoo 360 Vulcan Team Kernel Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, and OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to execute arbitrary code with kernel privileges Description: Multiple memory corruption issues were addressed through improved memory handling. CVE-ID CVE-2016-1754 : Lufeng Li of Qihoo 360 Vulcan Team CVE-2016-1755 : Ian Beer of Google Project Zero CVE-2016-1759 : lokihardt Kernel Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to determine kernel memory layout Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed through improved input validation. CVE-ID CVE-2016-1758 : Brandon Azad Kernel Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to execute arbitrary code with kernel privileges Description: Multiple integer overflows were addressed through improved input validation. CVE-ID CVE-2016-1753 : Juwei Lin Trend Micro working with Trend Micro's Zero Day Initiative (ZDI) Kernel Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to cause a denial of service Description: A denial of service issue was addressed through improved validation. CVE-ID CVE-2016-1752 : CESG libxml2 Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, and OS X El Capitan v10.11 to v10.11.3 Impact: Processing maliciously crafted XML may lead to unexpected application termination or arbitrary code execution Description: Multiple memory corruption issues were addressed through improved memory handling. CVE-ID CVE-2015-1819 CVE-2015-5312 : David Drysdale of Google CVE-2015-7499 CVE-2015-7500 : Kostya Serebryany of Google CVE-2015-7942 : Kostya Serebryany of Google CVE-2015-8035 : gustavo.grieco CVE-2015-8242 : Hugh Davenport CVE-2016-1761 : wol0xff working with Trend Micro's Zero Day Initiative (ZDI) CVE-2016-1762 Messages Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An attacker who is able to bypass Apple's certificate pinning, intercept TLS connections, inject messages, and record encrypted attachment-type messages may be able to read attachments Description: A cryptographic issue was addressed by rejecting duplicate messages on the client. CVE-ID CVE-2016-1788 : Christina Garman, Matthew Green, Gabriel Kaptchuk, Ian Miers, and Michael Rushanan of Johns Hopkins University Messages Available for: OS X El Capitan v10.11 to v10.11.3 Impact: Clicking a JavaScript link can reveal sensitive user information Description: An issue existed in the processing of JavaScript links. This issue was addressed through improved content security policy checks. CVE-ID CVE-2016-1764 : Matthew Bryan of the Uber Security Team (formerly of Bishop Fox), Joe DeMesy and Shubham Shah of Bishop Fox NVIDIA Graphics Drivers Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An application may be able to execute arbitrary code with kernel privileges Description: Multiple memory corruption issues were addressed through improved memory handling. CVE-ID CVE-2016-1741 : Ian Beer of Google Project Zero OpenSSH Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, and OS X El Capitan v10.11 to v10.11.3 Impact: Connecting to a server may leak sensitive user information, such as a client's private keys Description: Roaming, which was on by default in the OpenSSH client, exposed an information leak and a buffer overflow. These issues were addressed by disabling roaming in the client. CVE-ID CVE-2016-0777 : Qualys CVE-2016-0778 : Qualys OpenSSH Available for: OS X Mavericks v10.9.5 and OS X Yosemite v10.10.5 Impact: Multiple vulnerabilities in LibreSSL Description: Multiple vulnerabilities existed in LibreSSL versions prior to 2.1.8. These were addressed by updating LibreSSL to version 2.1.8. CVE-ID CVE-2015-5333 : Qualys CVE-2015-5334 : Qualys OpenSSL Available for: OS X El Capitan v10.11 to v10.11.3 Impact: A remote attacker may be able to cause a denial of service Description: A memory leak existed in OpenSSL versions prior to 0.9.8zh. This issue was addressed by updating OpenSSL to version 0.9.8zh. CVE-ID CVE-2015-3195 Python Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, and OS X El Capitan v10.11 to v10.11.3 Impact: Processing a maliciously crafted .png file may lead to arbitrary code execution Description: Multiple vulnerabilities existed in libpng versions prior to 1.6.20. These were addressed by updating libpng to version 1.6.20. CVE-ID CVE-2014-9495 CVE-2015-0973 CVE-2015-8126 : Adam Mariš CVE-2015-8472 : Adam Mariš QuickTime Available for: OS X El Capitan v10.11 to v10.11.3 Impact: Processing a maliciously crafted FlashPix Bitmap Image may lead to unexpected application termination or arbitrary code execution Description: Multiple memory corruption issues were addressed through improved memory handling. CVE-ID CVE-2016-1767 : Francis Provencher from COSIG CVE-2016-1768 : Francis Provencher from COSIG QuickTime Available for: OS X El Capitan v10.11 to v10.11.3 Impact: Processing a maliciously crafted Photoshop document may lead to unexpected application termination or arbitrary code execution Description: Multiple memory corruption issues were addressed through improved memory handling. CVE-ID CVE-2016-1769 : Francis Provencher from COSIG Reminders Available for: OS X El Capitan v10.11 to v10.11.3 Impact: Clicking a tel link can make a call without prompting the user Description: A user was not prompted before invoking a call. This was addressed through improved entitlement checks. CVE-ID CVE-2016-1770 : Guillaume Ross of Rapid7 and Laurent Chouinard of Laurent.ca Ruby Available for: OS X El Capitan v10.11 to v10.11.3 Impact: A local attacker may be able to cause unexpected application termination or arbitrary code execution Description: An unsafe tainted string usage vulnerability existed in versions prior to 2.0.0-p648. This issue was addressed by updating to version 2.0.0-p648. CVE-ID CVE-2015-7551 Security Available for: OS X El Capitan v10.11 to v10.11.3 Impact: A local user may be able to check for the existence of arbitrary files Description: A permissions issue existed in code signing tools. This was addressed though additional ownership checks. CVE-ID CVE-2016-1773 : Mark Mentovai of Google Inc. Security Available for: OS X El Capitan v10.11 to v10.11.3 Impact: Processing a maliciously crafted certificate may lead to arbitrary code execution Description: A memory corruption issue existed in the ASN.1 decoder. This issue was addressed through improved input validation. CVE-ID CVE-2016-1950 : Francis Gabriel of Quarkslab Tcl Available for: OS X Yosemite v10.10.5 and OS X El Capitan v10.11 to v10.11.3 Impact: Processing a maliciously crafted .png file may lead to arbitrary code execution Description: Multiple vulnerabilities existed in libpng versions prior to 1.6.20. These were addressed by removing libpng. CVE-ID CVE-2015-8126 : Adam Mariš TrueTypeScaler Available for: OS X El Capitan v10.11 to v10.11.3 Impact: Processing a maliciously crafted font file may lead to arbitrary code execution Description: A memory corruption issue existed in the processing of font files. This issue was addressed through improved input validation. CVE-ID CVE-2016-1775 : 0x1byte working with Trend Micro's Zero Day Initiative (ZDI) Wi-Fi Available for: OS X El Capitan v10.11 to v10.11.3 Impact: An attacker with a privileged network position may be able to execute arbitrary code Description: A frame validation and memory corruption issue existed for a given ethertype. This issue was addressed through additional ethertype validation and improved memory handling. CVE-ID CVE-2016-0801 : an anonymous researcher CVE-2016-0802 : an anonymous researcher OS X El Capitan 10.11.4 includes the security content of Safari 9.1. https://support.apple.com/kb/HT206171 OS X El Capitan v10.11.4 and Security Update 2016-002 may be obtained from the Mac App Store or Apple's Software Downloads web site: http://www.apple.com/support/downloads/ Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJW8JQFAAoJEBcWfLTuOo7tZSYP/1bHFA1qemkD37uu7nYpk/q6 ARVsPgME1I1+5tOxX0TQJgzMBmdQsKYdsTiLpDk5HTuv+dAMsFfasaUItGk8Sz1w HiYjSfVsxL+Pjz3vK8/4/fsi2lX6472MElRw8gudITOhXtniGcKo/vuA5dB+vM3l Jy1NLHHhZ6BD2t0bBmlz41mZMG3AMxal2wfqE+5LkjUwASzcvC/3B1sh7Fntwyau /71vIgMQ5AaETdgQJAuQivxPyTlFduBRgLjqvPiB9eSK4Ctu5t/hErFIrP2NiDCi UhfZC48XbiRjJfkUsUD/5TIKnI+jkZxOnch9ny32dw2kUIkbIAbqufTkzsMXOpng O+rI93Ni7nfzgI3EkI2bq+C+arOoRiveWuJvc3SMPD5RQHo4NCQVs0ekQJKNHF78 juPnY29n8WMjwLS6Zfm+bH+n8ELIXrmmEscRztK2efa9S7vJe+AgIxx7JE/f8OHF i9K7UQBXFXcpMjXi1aTby/IUnpL5Ny4NVwYwIhctj0Mf6wTH7uf/FMWYIQOXcIfP Izo+GXxNeLd4H2ypZ+UpkZg/Sn2mtCd88wLc96+owlZPBlSqWl3X1wTlp8i5FP2X qlQ7RcTHJDv8jPT/MOfzxEK1n/azp45ahHA0o6nohUdxlA7PLci9vPiJxqKPo/0q VZmOKa8qMxB1L/JmdCqy =mZR+ -----END PGP SIGNATURE----- . Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/libpng-1.4.18-x86_64-1_slack14.1.txz: Upgraded. Fixed incorrect implementation of png_set_PLTE() that uses png_ptr not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126 vulnerability. For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8472 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 13.0: ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/libpng-1.2.55-i486-1_slack13.0.txz Updated package for Slackware x86_64 13.0: ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/libpng-1.2.55-x86_64-1_slack13.0.txz Updated package for Slackware 13.1: ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/libpng-1.4.18-i486-1_slack13.1.txz Updated package for Slackware x86_64 13.1: ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/libpng-1.4.18-x86_64-1_slack13.1.txz Updated package for Slackware 13.37: ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/libpng-1.4.18-i486-1_slack13.37.txz Updated package for Slackware x86_64 13.37: ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/libpng-1.4.18-x86_64-1_slack13.37.txz Updated package for Slackware 14.0: ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/libpng-1.4.18-i486-1_slack14.0.txz Updated package for Slackware x86_64 14.0: ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/libpng-1.4.18-x86_64-1_slack14.0.txz Updated package for Slackware 14.1: ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/libpng-1.4.18-i486-1_slack14.1.txz Updated package for Slackware x86_64 14.1: ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/libpng-1.4.18-x86_64-1_slack14.1.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/libpng-1.6.20-i586-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/libpng-1.6.20-x86_64-1.txz MD5 signatures: +-------------+ Slackware 13.0 package: 0ee9224ad5684fad22c1b0c90605c63b libpng-1.2.55-i486-1_slack13.0.txz Slackware x86_64 13.0 package: d9b29264e8312baf0c511c81ad779e59 libpng-1.2.55-x86_64-1_slack13.0.txz Slackware 13.1 package: 28f6f162e3808d1dcdf6a3a98a8ccd69 libpng-1.4.18-i486-1_slack13.1.txz Slackware x86_64 13.1 package: 156846c2db1a60cc840ed6e545ad9ec3 libpng-1.4.18-x86_64-1_slack13.1.txz Slackware 13.37 package: 6c2eb1e0434a742f837b3d136d09fa89 libpng-1.4.18-i486-1_slack13.37.txz Slackware x86_64 13.37 package: 099974c30fce3f57ba60249e6cd4ad99 libpng-1.4.18-x86_64-1_slack13.37.txz Slackware 14.0 package: b546c957f439e78bbee7bdd429953a76 libpng-1.4.18-i486-1_slack14.0.txz Slackware x86_64 14.0 package: 66903cc8d9eea2c47698ff0776da13e2 libpng-1.4.18-x86_64-1_slack14.0.txz Slackware 14.1 package: f2dfcb4aa0a05fccf81f60f913bc7e8e libpng-1.4.18-i486-1_slack14.1.txz Slackware x86_64 14.1 package: c06efdbec225394a156860a4f571dd59 libpng-1.4.18-x86_64-1_slack14.1.txz Slackware -current package: 6f2e6e7f5f8c3760a372cc9ae3130060 l/libpng-1.6.20-i586-1.txz Slackware x86_64 -current package: 8be8af75ec81e9463adf345c0bf48432 l/libpng-1.6.20-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg libpng-1.4.18-i486-1_slack14.1.txz +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security@slackware.com +------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@slackware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address

Trust: 2.79

sources: NVD: CVE-2015-8472 // JVNDB: JVNDB-2015-006846 // BID: 78624 // VULHUB: VHN-86433 // VULMON: CVE-2015-8472 // PACKETSTORM: 135556 // PACKETSTORM: 135558 // PACKETSTORM: 135339 // PACKETSTORM: 135338 // PACKETSTORM: 134719 // PACKETSTORM: 137932 // PACKETSTORM: 136346 // PACKETSTORM: 134874

AFFECTED PRODUCTS

vendor:libpngmodel:libpngscope:eqversion:1.5.1

Trust: 1.9

vendor:libpngmodel:libpngscope:eqversion:1.4.17

Trust: 1.9

vendor:libpngmodel:libpngscope:eqversion:1.5.4

Trust: 1.9

vendor:libpngmodel:libpngscope:eqversion:1.5.5

Trust: 1.9

vendor:libpngmodel:libpngscope:eqversion:1.5.2

Trust: 1.9

vendor:libpngmodel:libpngscope:eqversion:1.5.6

Trust: 1.9

vendor:libpngmodel:libpngscope:eqversion:1.4.15

Trust: 1.6

vendor:libpngmodel:libpngscope:eqversion:1.4.16

Trust: 1.6

vendor:libpngmodel:libpngscope:eqversion:1.4.14

Trust: 1.6

vendor:libpngmodel:libpngscope:eqversion:1.5.3

Trust: 1.6

vendor:libpngmodel:libpngscope:eqversion:1.6.3

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.42

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.16

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.29

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.47

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.16

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.21

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.49

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.44

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.5

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.12

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.36

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.1

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.14

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.30

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.11

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.9

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.18

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.24

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.6

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.7

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.7

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.11

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.41

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.3

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.8

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.4

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.20

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.0

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.15

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.27

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.33

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.11

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.4

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.0

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.21

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.15

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.1

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.10

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.4

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.5

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.10

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.26

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.22

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.7

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.40

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.28

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.25

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.10

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.19

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.2

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.3

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.11

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.38

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.9

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.45

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.8

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.39

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.34

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.23

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.12

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.2

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.17

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.54

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.0.64

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.37

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.24

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.46

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.13

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.43

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.8

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.1

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.48

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.13

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.10

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.9

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.2

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.35

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.6

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.19

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.50

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.22

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.2.53

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.6.14

Trust: 1.0

vendor:applemodel:mac os xscope:lteversion:10.11.3

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.15

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.6.17

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.2.52

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.6.18

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.4.12

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.16

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.14

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.2.31

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.4.13

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.2.51

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.23

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.20

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.17

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.4.0

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.6.12

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.2.32

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.18

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.6.13

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.19

Trust: 1.0

vendor:oraclemodel:jre updatescope:eqversion:1.866

Trust: 0.9

vendor:oraclemodel:jdk updatescope:eqversion:1.866

Trust: 0.9

vendor:oraclemodel:jre updatescope:eqversion:1.865

Trust: 0.9

vendor:oraclemodel:jre updatescope:eqversion:1.791

Trust: 0.9

vendor:oraclemodel:jre updatescope:eqversion:1.6105

Trust: 0.9

vendor:oraclemodel:jdk updatescope:eqversion:1.865

Trust: 0.9

vendor:oraclemodel:jdk updatescope:eqversion:1.791

Trust: 0.9

vendor:oraclemodel:jdk updatescope:eqversion:1.6105

Trust: 0.9

vendor:png groupmodel:libpngscope:ltversion:1.6.x

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.9.5

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.11 to 10.11.3

Trust: 0.8

vendor:png groupmodel:libpngscope:eqversion:1.1.x

Trust: 0.8

vendor:png groupmodel:libpngscope:eqversion:1.5.25

Trust: 0.8

vendor:png groupmodel:libpngscope:eqversion:1.2.55

Trust: 0.8

vendor:oraclemodel:jdkscope:eqversion:7 update 91

Trust: 0.8

vendor:oraclemodel:jdkscope:eqversion:6 update 105

Trust: 0.8

vendor:oraclemodel:jrescope:eqversion:7 update 91

Trust: 0.8

vendor:oraclemodel:jrescope:eqversion:6 update 105

Trust: 0.8

vendor:png groupmodel:libpngscope:ltversion:1.5.x

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.10.5

Trust: 0.8

vendor:png groupmodel:libpngscope:eqversion:1.4.18

Trust: 0.8

vendor:png groupmodel:libpngscope:eqversion:1.6.20

Trust: 0.8

vendor:oraclemodel:java sescope:eqversion:embedded 8 update 65

Trust: 0.8

vendor:oraclemodel:jdkscope:eqversion:8 update 66

Trust: 0.8

vendor:oraclemodel:jrescope:eqversion:8 update 66

Trust: 0.8

vendor:png groupmodel:libpngscope:ltversion:1.4.x

Trust: 0.8

vendor:png groupmodel:libpngscope:ltversion:1.2.x

Trust: 0.8

vendor:png groupmodel:libpngscope:eqversion:1.3.x

Trust: 0.8

vendor:libpngmodel:libpngscope:eqversion:1.0.25

Trust: 0.3

vendor:redhatmodel:enterprise linux serverscope:eqversion:6

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.3.50

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:4.0.0.4

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.11

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.6.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.18

Trust: 0.3

vendor:ibmmodel:websphere real time sr8scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:8.0.1

Trust: 0.3

vendor:ibmmodel:powerkvmscope:eqversion:3.1

Trust: 0.3

vendor:ibmmodel:ilog optimization decision manager enterprisescope:eqversion:3.6

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.306

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.4.0.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.39

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.4

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.50

Trust: 0.3

vendor:ibmmodel:cognos business intelligence serverscope:eqversion:10.1.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.23

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.2.33

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:neversion:2.1.165.6

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.22

Trust: 0.3

vendor:ibmmodel:filenet system monitorscope:eqversion:4.5

Trust: 0.3

vendor:debianmodel:linux sparcscope:eqversion:6.0

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.6.3

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.31

Trust: 0.3

vendor:ibmmodel:websphere real timescope:eqversion:3.0

Trust: 0.3

vendor:ibmmodel:decision optimization centerscope:eqversion:3.8

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.11.2

Trust: 0.3

vendor:ibmmodel:websphere real time sr2scope:eqversion:3

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.6

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.5.1

Trust: 0.3

vendor:libpngmodel:libpngscope:neversion:1.4.18

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:8.0

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:eqversion:2.1.157

Trust: 0.3

vendor:ibmmodel:tivoli endpoint manager for remote controlscope:eqversion:8.2.1

Trust: 0.3

vendor:ibmmodel:tivoli composite application manager for transactionsscope:eqversion:7.4

Trust: 0.3

vendor:ibmmodel:tivoli network managerscope:eqversion:4.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.54

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.2.4

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.6

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:2.1.1.2

Trust: 0.3

vendor:ibmmodel:cognos business intelligence serverscope:eqversion:10.2.1

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.2.0

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.11.1

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:8.2

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.11.3

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.47

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.28

Trust: 0.3

vendor:ibmmodel:aixscope:eqversion:7.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.42

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.5

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.5

Trust: 0.3

vendor:ibmmodel:cognos business intelligence serverscope:eqversion:10.1

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.14

Trust: 0.3

vendor:ibmmodel:expeditorscope:eqversion:6.2.3

Trust: 0.3

vendor:ibmmodel:cognos metrics managerscope:eqversion:10.1

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.31

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.15

Trust: 0.3

vendor:ibmmodel:cognos metrics managerscope:eqversion:10.2

Trust: 0.3

vendor:ibmmodel:smartcloud provisioning for software virtual appliancescope:eqversion:2.1

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.0.11

Trust: 0.3

vendor:ibmmodel:tivoli network manager if0002 ip editioscope:neversion:4.2

Trust: 0.3

vendor:ibmmodel:cognos insightscope:eqversion:10.2.1

Trust: 0.3

vendor:redhatmodel:enterprise linux desktopscope:eqversion:6

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.1

Trust: 0.3

vendor:libpngmodel:libpngscope:neversion:1.0.65

Trust: 0.3

vendor:s u s emodel:opensusescope:eqversion:13.2

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.6.1

Trust: 0.3

vendor:redhatmodel:enterprise linux desktop supplementaryscope:eqversion:6

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.3.4

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.31

Trust: 0.3

vendor:ibmmodel:websphere real time sr6scope:eqversion:3

Trust: 0.3

vendor:redhatmodel:enterprise linux supplementary serverscope:eqversion:5

Trust: 0.3

vendor:ibmmodel:websphere real time sr9scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:powerkvm sp3scope:neversion:2.1.1

Trust: 0.3

vendor:ibmmodel:websphere real time sr4-fp2scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.0.13

Trust: 0.3

vendor:ibmmodel:fabric managerscope:eqversion:4.1

Trust: 0.3

vendor:debianmodel:linux ia-64scope:eqversion:6.0

Trust: 0.3

vendor:ibmmodel:powerkvmscope:eqversion:2.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.2

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:3.1.0.2

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.4

Trust: 0.3

vendor:ibmmodel:cognos insightscope:eqversion:10.2

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.3.2

Trust: 0.3

vendor:ibmmodel:ilog optimization decision manager enterprisescope:eqversion:3.5

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.2.8

Trust: 0.3

vendor:ibmmodel:security network protectionscope:eqversion:5.3.1

Trust: 0.3

vendor:ibmmodel:cognos business intelligence serverscope:eqversion:10.2.11

Trust: 0.3

vendor:redhatmodel:enterprise linux workstationscope:eqversion:6

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.27

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.13

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.2.3.3

Trust: 0.3

vendor:ibmmodel:tivoli network managerscope:eqversion:4.1.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.2.9

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.19

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.14

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:4.0

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.3.0

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.12

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.2.305

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.8

Trust: 0.3

vendor:libpngmodel:libpngscope:neversion:1.2.55

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:eqversion:3.12

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.3

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:4.0.0.2

Trust: 0.3

vendor:debianmodel:linux amd64scope:eqversion:6.0

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.303

Trust: 0.3

vendor:ibmmodel:cognos metrics managerscope:eqversion:10.1.1

Trust: 0.3

vendor:ibmmodel:cognos tm1scope:eqversion:10.1.0

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.6.0.1

Trust: 0.3

vendor:ibmmodel:ilog optimization decision manager enterprisescope:eqversion:3.4

Trust: 0.3

vendor:debianmodel:linux mipsscope:eqversion:6.0

Trust: 0.3

vendor:ibmmodel:expeditorscope:eqversion:6.2.2

Trust: 0.3

vendor:ibmmodel:cognos tm1scope:eqversion:10.2.2

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.2.32

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:0.90

Trust: 0.3

vendor:ibmmodel:security network protectionscope:eqversion:5.3.2

Trust: 0.3

vendor:ibmmodel:aixscope:eqversion:6.1

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.1.0

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.40

Trust: 0.3

vendor:ibmmodel:cognos metrics managerscope:eqversion:10.2.1

Trust: 0.3

vendor:ibmmodel:decision optimization centerscope:eqversion:3.7.0.2

Trust: 0.3

vendor:ibmmodel:tivoli network managerscope:eqversion:3.9

Trust: 0.3

vendor:ibmmodel:integration busscope:eqversion:9

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.59

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.2.7

Trust: 0.3

vendor:ibmmodel:websphere message broker toolkitscope:eqversion:8

Trust: 0.3

vendor:ibmmodel:integration busscope:eqversion:10

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.24

Trust: 0.3

vendor:redhatmodel:enterprise linux hpc node optionalscope:eqversion:6

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:8.2.1

Trust: 0.3

vendor:applemodel:mac osscope:neversion:x10.11.4

Trust: 0.3

vendor:redhatmodel:enterprise linux server supplementaryscope:eqversion:6

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.43

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.5.0.1

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.2.3.5

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.4.0.1

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.2.3.1

Trust: 0.3

vendor:ibmmodel:cognos business intelligence serverscope:eqversion:10.2.2

Trust: 0.3

vendor:ibmmodel:websphere real time sr7 fp1scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:3.1.0.1

Trust: 0.3

vendor:ibmmodel:aixscope:eqversion:5.3

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.6.3

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.0.10

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:3.1.2.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.2.6

Trust: 0.3

vendor:redhatmodel:enterprise linux workstation supplementaryscope:eqversion:6

Trust: 0.3

vendor:ibmmodel:fabric managerscope:neversion:4.1.04.0048

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.33

Trust: 0.3

vendor:redhatmodel:enterprise linux workstation optionalscope:eqversion:6

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.3.3

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.2.35

Trust: 0.3

vendor:ibmmodel:enterprise content management system monitorscope:eqversion:5.1

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.3.0.4

Trust: 0.3

vendor:ibmmodel:decision optimization centerscope:eqversion:3.7

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.56

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.41

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.2.3

Trust: 0.3

vendor:ibmmodel:websphere real time sr7scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.5

Trust: 0.3

vendor:ibmmodel:websphere real time sr fpscope:eqversion:3920

Trust: 0.3

vendor:ibmmodel:security identity governance and intelligencescope:eqversion:5.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.21

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.9

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.6.0.1

Trust: 0.3

vendor:libpngmodel:libpngscope:neversion:1.5.25

Trust: 0.3

vendor:ibmmodel:enterprise content management system monitorscope:eqversion:5.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.30

Trust: 0.3

vendor:applemodel:mac os security updatescope:neversion:x2016-0020

Trust: 0.3

vendor:ibmmodel:websphere real timescope:eqversion:2.0

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.0.12

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.1.1

Trust: 0.3

vendor:s u s emodel:opensusescope:eqversion:13.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.35

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:3.1

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.6

Trust: 0.3

vendor:ibmmodel:websphere real time srscope:eqversion:39

Trust: 0.3

vendor:susemodel:linux enterprise server sp4 ltssscope:eqversion:10

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.58

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.51

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.2.303

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.2.6

Trust: 0.3

vendor:debianmodel:linux s/390scope:eqversion:6.0

Trust: 0.3

vendor:libpngmodel:libpngscope:neversion:1.6.20

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:8.1

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.1.9

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.4.0

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.10.5

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.45

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.2

Trust: 0.3

vendor:ibmmodel:expeditorscope:eqversion:6.2.1

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.32

Trust: 0.3

vendor:debianmodel:linux armscope:eqversion:6.0

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.17

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.44

Trust: 0.3

vendor:ibmmodel:websphere real timescope:eqversion:3

Trust: 0.3

vendor:ibmmodel:websphere real time sr fpscope:neversion:3930

Trust: 0.3

vendor:ibmmodel:tivoli network managerscope:eqversion:3.8

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.34

Trust: 0.3

vendor:redhatmodel:enterprise linux server optionalscope:eqversion:6

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.1.8

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.46

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.3.0.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.7

Trust: 0.3

vendor:ibmmodel:websphere real time sr5scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:cognos tm1scope:eqversion:10.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.55

Trust: 0.3

vendor:ibmmodel:websphere real time sr8 fp10scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:eqversion:2.1.165.4

Trust: 0.3

vendor:susemodel:linux enterprise module for legacy softwarescope:eqversion:12

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.52

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.5

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.4

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.9.5

Trust: 0.3

vendor:ibmmodel:decision optimization centerscope:eqversion:3.8.0.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.48

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.3.0.3

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.3

Trust: 0.3

vendor:ibmmodel:tivoli network managerscope:eqversion:4.1

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:eqversion:2.1.165.1

Trust: 0.3

vendor:ibmmodel:cognos metrics managerscope:eqversion:10.2.2

Trust: 0.3

vendor:ibmmodel:integration toolkitscope:eqversion:9

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.32

Trust: 0.3

vendor:centosmodel:centosscope:eqversion:6

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.2.5

Trust: 0.3

vendor:ibmmodel:cognos business intelligence serverscope:eqversion:10.2

Trust: 0.3

vendor:redhatmodel:enterprise linux desktop optionalscope:eqversion:6

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.29

Trust: 0.3

vendor:ibmmodel:tivoli composite application manager for transactionsscope:eqversion:7.3.0

Trust: 0.3

vendor:redhatmodel:enterprise linux hpc node supplementaryscope:eqversion:6

Trust: 0.3

vendor:redhatmodel:enterprise linux desktop supplementary clientscope:eqversion:5

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.26

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.11

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.57

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:eqversion:2.1.165.5

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:2.1

Trust: 0.3

vendor:ibmmodel:decision optimization centerscope:eqversion:3.6

Trust: 0.3

vendor:redhatmodel:enterprise linux hpc nodescope:eqversion:6

Trust: 0.3

vendor:ibmmodel:websphere message brokerscope:eqversion:8

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.38

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.5.1

Trust: 0.3

vendor:ibmmodel:websphere real time sr fpscope:eqversion:3810

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.2.5

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.37

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:3.1.2

Trust: 0.3

vendor:ibmmodel:aixscope:eqversion:7.1

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:2.1.1

Trust: 0.3

vendor:debianmodel:linux ia-32scope:eqversion:6.0

Trust: 0.3

vendor:ibmmodel:cognos insightscope:eqversion:10.2.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.16

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.53

Trust: 0.3

vendor:oraclemodel:linuxscope:eqversion:0

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.20

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.10

Trust: 0.3

vendor:ibmmodel:ilog optimization decision manager enterprisescope:eqversion:3.7.0.2

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.3.0

Trust: 0.3

vendor:debianmodel:linux powerpcscope:eqversion:6.0

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.302

Trust: 0.3

vendor:ibmmodel:websphere real time sr9 fp10scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.1.3

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.2.3.4

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:neversion:3.13

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:eqversion:2.1.158

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.5.0.1

Trust: 0.3

sources: BID: 78624 // JVNDB: JVNDB-2015-006846 // CNNVD: CNNVD-201512-189 // NVD: CVE-2015-8472

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2015-8472
value: HIGH

Trust: 1.0

NVD: CVE-2015-8472
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201512-189
value: MEDIUM

Trust: 0.6

VULHUB: VHN-86433
value: HIGH

Trust: 0.1

VULMON: CVE-2015-8472
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2015-8472
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-86433
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2015-8472
baseSeverity: HIGH
baseScore: 7.3
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
exploitabilityScore: 3.9
impactScore: 3.4
version: 3.0

Trust: 1.8

sources: VULHUB: VHN-86433 // VULMON: CVE-2015-8472 // JVNDB: JVNDB-2015-006846 // CNNVD: CNNVD-201512-189 // NVD: CVE-2015-8472

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-86433 // JVNDB: JVNDB-2015-006846 // NVD: CVE-2015-8472

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201512-189

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201512-189

CONFIGURATIONS

[
  {
    "CVE_data_version": "4.0",
    "nodes": [
      {
        "operator": "OR",
        "cpe_match": [
          {
            "vulnerable": true,
            "cpe22Uri": "cpe:/a:libpng:libpng"
          },
          {
            "vulnerable": true,
            "cpe22Uri": "cpe:/o:apple:mac_os_x"
          },
          {
            "vulnerable": true,
            "cpe22Uri": "cpe:/a:oracle:jdk"
          },
          {
            "vulnerable": true,
            "cpe22Uri": "cpe:/a:oracle:jre"
          },
          {
            "vulnerable": true,
            "cpe22Uri": "cpe:/a:oracle:java_se"
          }
        ]
      }
    ]
  }
]

sources: JVNDB: JVNDB-2015-006846

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-86433

PATCH

title:APPLE-SA-2016-03-21-5 OS X El Capitan 10.11.4 and Security Update 2016-002url:http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html

Trust: 0.8

title:HT206167url:https://support.apple.com/en-us/HT206167

Trust: 0.8

title:HT206167url:https://support.apple.com/ja-jp/HT206167

Trust: 0.8

title:Text Form of Oracle Critical Patch Update - January 2016 Risk Matricesurl:http://www.oracle.com/technetwork/topics/security/cpujan2016verbose-2367956.html

Trust: 0.8

title:Oracle Critical Patch Update Advisory - January 2016url:http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

Trust: 0.8

title:January 2016 Critical Patch Update Releasedurl:https://blogs.oracle.com/security/entry/january_2016_critical_patch_update

Trust: 0.8

title:libpng10 / 1.0.65url:http://sourceforge.net/projects/libpng/files/libpng10/1.0.65/

Trust: 0.8

title:libpng12 / 1.2.55url:http://sourceforge.net/projects/libpng/files/libpng12/1.2.55/

Trust: 0.8

title:libpng14 / 1.4.18url:http://sourceforge.net/projects/libpng/files/libpng14/1.4.18/

Trust: 0.8

title:libpng15 / 1.5.25url:http://sourceforge.net/projects/libpng/files/libpng15/1.5.25/

Trust: 0.8

title:libpng16 / 1.6.20url:http://sourceforge.net/projects/libpng/files/libpng16/1.6.20/

Trust: 0.8

title:TLSA-2016-11url:http://www.turbolinux.co.jp/security/2016/TLSA-2016-11j.html

Trust: 0.8

title:Oracle Corporation Javaプラグインの脆弱性に関するお知らせurl:http://www.fmworld.net/biz/common/oracle/20160120.html

Trust: 0.8

title:libpng Buffer Overflow Vulnerability Fixurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=59039

Trust: 0.6

title:Red Hat: Moderate: libpng security updateurl:https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20152596 - Security Advisory

Trust: 0.1

title:Red Hat: Moderate: libpng12 security updateurl:https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20152595 - Security Advisory

Trust: 0.1

title:Red Hat: Moderate: libpng security updateurl:https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20152594 - Security Advisory

Trust: 0.1

title:Debian CVElist Bug Report Logs: libpng: CVE-2015-8540: read underflow in libpngurl:https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=0a130e26709c1ba00694161c08b9c604

Trust: 0.1

title:Ubuntu Security Notice: libpng vulnerabilitiesurl:https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2861-1

Trust: 0.1

title:Debian CVElist Bug Report Logs: libpng: Incomplete fix for CVE-2015-8126url:https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=386e683fecec564e81371b5dca873869

Trust: 0.1

title:Debian Security Advisories: DSA-3443-1 libpng -- security updateurl:https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories&qid=57e4bc5fc071e2986f7cef65414ffe23

Trust: 0.1

title:Red Hat: CVE-2015-8472url:https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database&qid=CVE-2015-8472

Trust: 0.1

title:Amazon Linux AMI: ALAS-2015-615url:https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2015-615

Trust: 0.1

title:Apple: OS X El Capitan v10.11.4 and Security Update 2016-002url:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=ef054ba76412200e34091eb91c38c281

Trust: 0.1

title:Oracle Linux Bulletins: Oracle Linux Bulletin - October 2015url:https://vulmon.com/vendoradvisory?qidtp=oracle_linux_bulletins&qid=435ed9abc2fb1e74ce2a69605a01e326

Trust: 0.1

title:Oracle: Oracle Critical Patch Update Advisory - January 2016url:https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=63802a6c83b107c4e6e0c7f9241a66a8

Trust: 0.1

title:IBM: Security Bulletin: Multiple vulnerabilities in IBM Java affect IBM Netezza Analytics for NPSurl:https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog&qid=c36fc403a4c2c6439b732d2fca738f58

Trust: 0.1

title:clair-laburl:https://github.com/sjourdan/clair-lab

Trust: 0.1

sources: VULMON: CVE-2015-8472 // JVNDB: JVNDB-2015-006846 // CNNVD: CNNVD-201512-189

EXTERNAL IDS

db:NVDid:CVE-2015-8472

Trust: 3.7

db:BIDid:78624

Trust: 1.5

db:OPENWALLid:OSS-SECURITY/2015/12/03/6

Trust: 1.2

db:MCAFEEid:SB10148

Trust: 1.2

db:JVNid:JVNVU97668313

Trust: 0.8

db:JVNDBid:JVNDB-2015-006846

Trust: 0.8

db:CNNVDid:CNNVD-201512-189

Trust: 0.7

db:PACKETSTORMid:134874

Trust: 0.2

db:PACKETSTORMid:135153

Trust: 0.1

db:PACKETSTORMid:135265

Trust: 0.1

db:VULHUBid:VHN-86433

Trust: 0.1

db:VULMONid:CVE-2015-8472

Trust: 0.1

db:PACKETSTORMid:135556

Trust: 0.1

db:PACKETSTORMid:135558

Trust: 0.1

db:PACKETSTORMid:135339

Trust: 0.1

db:PACKETSTORMid:135338

Trust: 0.1

db:PACKETSTORMid:134719

Trust: 0.1

db:PACKETSTORMid:137932

Trust: 0.1

db:PACKETSTORMid:136346

Trust: 0.1

sources: VULHUB: VHN-86433 // VULMON: CVE-2015-8472 // BID: 78624 // JVNDB: JVNDB-2015-006846 // PACKETSTORM: 135556 // PACKETSTORM: 135558 // PACKETSTORM: 135339 // PACKETSTORM: 135338 // PACKETSTORM: 134719 // PACKETSTORM: 137932 // PACKETSTORM: 136346 // PACKETSTORM: 134874 // CNNVD: CNNVD-201512-189 // NVD: CVE-2015-8472

REFERENCES

url:http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

Trust: 1.5

url:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Trust: 1.5

url:http://www.securityfocus.com/bid/78624

Trust: 1.3

url:http://rhn.redhat.com/errata/rhsa-2015-2595.html

Trust: 1.3

url:http://rhn.redhat.com/errata/rhsa-2016-0055.html

Trust: 1.3

url:http://rhn.redhat.com/errata/rhsa-2016-0057.html

Trust: 1.3

url:https://access.redhat.com/errata/rhsa-2016:1430

Trust: 1.3

url:http://lists.apple.com/archives/security-announce/2016/mar/msg00004.html

Trust: 1.2

url:http://sourceforge.net/projects/libpng/files/libpng10/1.0.65/

Trust: 1.2

url:http://sourceforge.net/projects/libpng/files/libpng12/1.2.55/

Trust: 1.2

url:http://sourceforge.net/projects/libpng/files/libpng14/1.4.18/

Trust: 1.2

url:http://sourceforge.net/projects/libpng/files/libpng15/1.5.25/

Trust: 1.2

url:http://sourceforge.net/projects/libpng/files/libpng16/1.6.20/

Trust: 1.2

url:https://support.apple.com/ht206167

Trust: 1.2

url:http://www.debian.org/security/2016/dsa-3443

Trust: 1.2

url:http://lists.fedoraproject.org/pipermail/package-announce/2016-january/174936.html

Trust: 1.2

url:http://lists.fedoraproject.org/pipermail/package-announce/2016-january/175073.html

Trust: 1.2

url:http://lists.fedoraproject.org/pipermail/package-announce/2016-january/174905.html

Trust: 1.2

url:http://www.openwall.com/lists/oss-security/2015/12/03/6

Trust: 1.2

url:http://rhn.redhat.com/errata/rhsa-2015-2594.html

Trust: 1.2

url:http://rhn.redhat.com/errata/rhsa-2015-2596.html

Trust: 1.2

url:http://rhn.redhat.com/errata/rhsa-2016-0056.html

Trust: 1.2

url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html

Trust: 1.2

url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html

Trust: 1.2

url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html

Trust: 1.2

url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html

Trust: 1.2

url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html

Trust: 1.2

url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html

Trust: 1.2

url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html

Trust: 1.2

url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html

Trust: 1.2

url:https://kc.mcafee.com/corporate/index?page=content&id=sb10148

Trust: 1.1

url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-8472

Trust: 0.9

url:https://www.ipa.go.jp/security/ciadr/vul/20160120-jre.html

Trust: 0.8

url:http://www.jpcert.or.jp/at/2016/at160005.html

Trust: 0.8

url:http://jvn.jp/vu/jvnvu97668313

Trust: 0.8

url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-8472

Trust: 0.8

url:https://nvd.nist.gov/vuln/detail/cve-2015-8472

Trust: 0.8

url:https://nvd.nist.gov/vuln/detail/cve-2015-8126

Trust: 0.7

url:https://access.redhat.com/security/cve/cve-2015-8126

Trust: 0.6

url:https://access.redhat.com/articles/11258

Trust: 0.6

url:https://access.redhat.com/security/team/contact/

Trust: 0.6

url:https://www.redhat.com/mailman/listinfo/rhsa-announce

Trust: 0.6

url:https://bugzilla.redhat.com/):

Trust: 0.6

url:https://access.redhat.com/security/team/key/

Trust: 0.6

url:https://access.redhat.com/security/cve/cve-2015-8472

Trust: 0.6

url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-affect-ibm-netezza-analytics/

Trust: 0.6

url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-affect-ibm-netezza-analytics-for-nps/

Trust: 0.6

url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-jre-8-0-1-1-affect-ibm-netezza-platform-software-clients/

Trust: 0.6

url:https://access.redhat.com/security/cve/cve-2016-0448

Trust: 0.5

url:https://access.redhat.com/security/cve/cve-2016-0483

Trust: 0.5

url:https://access.redhat.com/security/cve/cve-2016-0402

Trust: 0.5

url:https://access.redhat.com/security/cve/cve-2016-0466

Trust: 0.5

url:https://access.redhat.com/security/cve/cve-2016-0494

Trust: 0.5

url:https://nvd.nist.gov/vuln/detail/cve-2016-0448

Trust: 0.4

url:https://nvd.nist.gov/vuln/detail/cve-2015-7575

Trust: 0.4

url:https://nvd.nist.gov/vuln/detail/cve-2016-0466

Trust: 0.4

url:https://access.redhat.com/security/cve/cve-2015-7575

Trust: 0.4

url:https://nvd.nist.gov/vuln/detail/cve-2016-0483

Trust: 0.4

url:https://nvd.nist.gov/vuln/detail/cve-2016-0494

Trust: 0.4

url:https://nvd.nist.gov/vuln/detail/cve-2016-0402

Trust: 0.4

url:http://www.libpng.org/pub/png/libpng.html

Trust: 0.3

url:http://seclists.org/oss-sec/2015/q4/428

Trust: 0.3

url:http://aix.software.ibm.com/aix/efixes/security/java_jan2016_advisory.asc

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=isg3t1023374

Trust: 0.3

url: https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5099293

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21982337

Trust: 0.3

url:http://www.ibm.com/support/docview.wss?uid=swg21979528

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21978310

Trust: 0.3

url:http://www.ibm.com/support/docview.wss?uid=swg21979761

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21973231

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21974194

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21975785

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21975835

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21975904

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21975929

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21975930

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21976631

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21976779

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21976855

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21976924

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21977053

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg21983487

Trust: 0.3

url:https://www-01.ibm.com/support/docview.wss?uid=swg21984483

Trust: 0.3

url:http://www-01.ibm.com/support/docview.wss?uid=swg2c1000115

Trust: 0.3

url:https://access.redhat.com/security/updates/classification/#critical

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2015-5041

Trust: 0.3

url:https://access.redhat.com/security/cve/cve-2015-5041

Trust: 0.3

url:https://access.redhat.com/security/cve/cve-2015-7981

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2015-7981

Trust: 0.3

url:https://access.redhat.com/security/cve/cve-2016-0475

Trust: 0.2

url:http://www.ibm.com/developerworks/java/jdk/alerts/

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2016-0475

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2015-8540

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2015-8540

Trust: 0.2

url:http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#appendixjava

Trust: 0.2

url:https://access.redhat.com/security/updates/classification/#moderate

Trust: 0.2

url:https://kc.mcafee.com/corporate/index?page=content&amp;id=sb10148

Trust: 0.1

url:https://cwe.mitre.org/data/definitions/119.html

Trust: 0.1

url:https://access.redhat.com/errata/rhsa-2015:2596

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:https://usn.ubuntu.com/2861-1/

Trust: 0.1

url:http://tools.cisco.com/security/center/viewalert.x?alertid=43094

Trust: 0.1

url:https://rhn.redhat.com/errata/rhsa-2016-0098.html

Trust: 0.1

url:https://rhn.redhat.com/errata/rhsa-2016-0101.html

Trust: 0.1

url:https://access.redhat.com/security/updates/classification/#important

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4883

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4840

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2016-3422

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4882

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4903

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4872

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4844

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4806

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2016-3449

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-0363

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2016-0264

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4871

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4860

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4893

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4871

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-0376

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4803

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4840

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2016-0376

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4734

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4860

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4842

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4843

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4835

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4903

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4805

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4902

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4883

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4810

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4805

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4893

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2016-3443

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2016-0363

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4882

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4842

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4843

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4835

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4810

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4902

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4872

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2016-0686

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2016-3426

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4734

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4803

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-4806

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-4844

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2015-5006

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2016-3427

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-5006

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2016-0687

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-0264

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-7551

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-0777

Trust: 0.1

url:https://support.apple.com/kb/ht201222

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-8659

Trust: 0.1

url:https://gpgtools.org

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-8035

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-1819

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-3195

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-7499

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-0801

Trust: 0.1

url:http://www.apple.com/support/downloads/

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-8242

Trust: 0.1

url:https://support.apple.com/kb/ht206171

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-1732

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-5312

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-7942

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-7500

Trust: 0.1

url:https://www.apple.com/support/security/pgp/

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2014-9495

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-1734

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-1740

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-5334

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-1733

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-1736

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-1735

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-0778

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-5333

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-0802

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-1738

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-1737

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2015-0973

Trust: 0.1

url:http://slackware.com

Trust: 0.1

url:http://osuosl.org)

Trust: 0.1

url:http://slackware.com/gpg-key

Trust: 0.1

sources: VULHUB: VHN-86433 // VULMON: CVE-2015-8472 // BID: 78624 // JVNDB: JVNDB-2015-006846 // PACKETSTORM: 135556 // PACKETSTORM: 135558 // PACKETSTORM: 135339 // PACKETSTORM: 135338 // PACKETSTORM: 134719 // PACKETSTORM: 137932 // PACKETSTORM: 136346 // PACKETSTORM: 134874 // CNNVD: CNNVD-201512-189 // NVD: CVE-2015-8472

CREDITS

Glenn Randers-Pehrson

Trust: 0.9

sources: BID: 78624 // CNNVD: CNNVD-201512-189

SOURCES

db:VULHUBid:VHN-86433
db:VULMONid:CVE-2015-8472
db:BIDid:78624
db:JVNDBid:JVNDB-2015-006846
db:PACKETSTORMid:135556
db:PACKETSTORMid:135558
db:PACKETSTORMid:135339
db:PACKETSTORMid:135338
db:PACKETSTORMid:134719
db:PACKETSTORMid:137932
db:PACKETSTORMid:136346
db:PACKETSTORMid:134874
db:CNNVDid:CNNVD-201512-189
db:NVDid:CVE-2015-8472

LAST UPDATE DATE

2025-04-30T02:15:23.360000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-86433date:2017-11-04T00:00:00
db:VULMONid:CVE-2015-8472date:2017-11-04T00:00:00
db:BIDid:78624date:2016-08-02T17:01:00
db:JVNDBid:JVNDB-2015-006846date:2016-05-31T00:00:00
db:CNNVDid:CNNVD-201512-189date:2021-05-18T00:00:00
db:NVDid:CVE-2015-8472date:2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:VULHUBid:VHN-86433date:2016-01-21T00:00:00
db:VULMONid:CVE-2015-8472date:2016-01-21T00:00:00
db:BIDid:78624date:2015-12-03T00:00:00
db:JVNDBid:JVNDB-2015-006846date:2016-01-27T00:00:00
db:PACKETSTORMid:135556date:2016-02-02T16:44:07
db:PACKETSTORMid:135558date:2016-02-02T16:44:18
db:PACKETSTORMid:135339date:2016-01-21T14:47:36
db:PACKETSTORMid:135338date:2016-01-21T14:47:29
db:PACKETSTORMid:134719date:2015-12-10T00:39:51
db:PACKETSTORMid:137932date:2016-07-18T19:51:43
db:PACKETSTORMid:136346date:2016-03-22T15:18:02
db:PACKETSTORMid:134874date:2015-12-16T20:23:10
db:CNNVDid:CNNVD-201512-189date:2015-12-10T00:00:00
db:NVDid:CVE-2015-8472date:2016-01-21T15:59:00.117