Sign-up

ID

VAR-201601-0495


CVE

CVE-2015-8472


TITLE

libpng of png_set_PLTE Buffer overflow vulnerability in functions

Trust: 0.8

sources: JVNDB: JVNDB-2015-006846

DESCRIPTION

Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126. libpng of png_set_PLTE The function contains a buffer overflow vulnerability. libpng is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code on the affected system. Failed attacks will cause denial-of-service conditions. Note: This issue is the result of an incomplete fix for the issue described in 77568 (libpng CVE-2015-8126 Multiple Heap Based Buffer Overflow Vulnerabilities). The following versions are affected: libpng prior to 1.0.65, 1.1.x and 1.2.x prior to 1.2.55, 1.3.x, 1.4.x prior to 1.4.18, 1.5.x prior to 1.5.25, 1.6 1.6.x versions prior to .20. Description: IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security alerts page, listed in the References section. (CVE-2015-5041, CVE-2015-7575, CVE-2015-7981, CVE-2015-8126, CVE-2015-8472, CVE-2015-8540, CVE-2016-0402, CVE-2016-0448, CVE-2016-0466, CVE-2016-0483, CVE-2016-0494) Note: This update also disallows the use of the MD5 hash algorithm in the certification path processing. The use of MD5 can be re-enabled by removing MD5 from the jdk.certpath.disabledAlgorithms security property defined in the java.security file. All running instances of IBM Java must be restarted for the update to take effect. Bugs fixed (https://bugzilla.redhat.com/): 1276416 - CVE-2015-7981 libpng: Out-of-bounds read in png_convert_to_rfc1123 1281756 - CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions 1289841 - CVE-2015-7575 TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH) 1291312 - CVE-2015-8540 libpng: underflow read in png_check_keyword() 1298906 - CVE-2016-0494 ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543) 1298957 - CVE-2016-0402 OpenJDK: URL deserialization inconsistencies (Networking, 8059054) 1299073 - CVE-2016-0448 OpenJDK: logging of RMI connection secrets (JMX, 8130710) 1299385 - CVE-2016-0466 OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962) 1299441 - CVE-2016-0483 OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017) 1302689 - CVE-2015-5041 IBM JDK: J9 JVM allows code to invoke non-public interface methods 6. 6) - i386, x86_64 3. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: libpng12 security update Advisory ID: RHSA-2015:2595-01 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-2595.html Issue date: 2015-12-09 CVE Names: CVE-2015-7981 CVE-2015-8126 CVE-2015-8472 ===================================================================== 1. Summary: Updated libpng12 packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - aarch64, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - aarch64, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: The libpng12 packages contain a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files. It was discovered that the png_get_PLTE() and png_set_PLTE() functions of libpng did not correctly calculate the maximum palette sizes for bit depths of less than 8. In case an application tried to use these functions in combination with properly calculated palette sizes, this could lead to a buffer overflow or out-of-bounds reads. An attacker could exploit this to cause a crash or potentially execute arbitrary code by tricking an unsuspecting user into processing a specially crafted PNG image. However, the exact impact is dependent on the application using the library. An attacker could possibly use this flaw to cause an out-of-bounds read by tricking an unsuspecting user into processing a specially crafted PNG image. (CVE-2015-7981) All libpng12 users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Package List: Red Hat Enterprise Linux Client (v. 7): Source: libpng12-1.2.50-7.el7_2.src.rpm x86_64: libpng12-1.2.50-7.el7_2.i686.rpm libpng12-1.2.50-7.el7_2.x86_64.rpm libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm libpng12-devel-1.2.50-7.el7_2.i686.rpm libpng12-devel-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: libpng12-1.2.50-7.el7_2.src.rpm x86_64: libpng12-1.2.50-7.el7_2.i686.rpm libpng12-1.2.50-7.el7_2.x86_64.rpm libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm libpng12-devel-1.2.50-7.el7_2.i686.rpm libpng12-devel-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: libpng12-1.2.50-7.el7_2.src.rpm aarch64: libpng12-1.2.50-7.el7_2.aarch64.rpm libpng12-debuginfo-1.2.50-7.el7_2.aarch64.rpm ppc64: libpng12-1.2.50-7.el7_2.ppc.rpm libpng12-1.2.50-7.el7_2.ppc64.rpm libpng12-debuginfo-1.2.50-7.el7_2.ppc.rpm libpng12-debuginfo-1.2.50-7.el7_2.ppc64.rpm ppc64le: libpng12-1.2.50-7.el7_2.ppc64le.rpm libpng12-debuginfo-1.2.50-7.el7_2.ppc64le.rpm s390x: libpng12-1.2.50-7.el7_2.s390.rpm libpng12-1.2.50-7.el7_2.s390x.rpm libpng12-debuginfo-1.2.50-7.el7_2.s390.rpm libpng12-debuginfo-1.2.50-7.el7_2.s390x.rpm x86_64: libpng12-1.2.50-7.el7_2.i686.rpm libpng12-1.2.50-7.el7_2.x86_64.rpm libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): aarch64: libpng12-debuginfo-1.2.50-7.el7_2.aarch64.rpm libpng12-devel-1.2.50-7.el7_2.aarch64.rpm ppc64: libpng12-debuginfo-1.2.50-7.el7_2.ppc.rpm libpng12-debuginfo-1.2.50-7.el7_2.ppc64.rpm libpng12-devel-1.2.50-7.el7_2.ppc.rpm libpng12-devel-1.2.50-7.el7_2.ppc64.rpm ppc64le: libpng12-debuginfo-1.2.50-7.el7_2.ppc64le.rpm libpng12-devel-1.2.50-7.el7_2.ppc64le.rpm s390x: libpng12-debuginfo-1.2.50-7.el7_2.s390.rpm libpng12-debuginfo-1.2.50-7.el7_2.s390x.rpm libpng12-devel-1.2.50-7.el7_2.s390.rpm libpng12-devel-1.2.50-7.el7_2.s390x.rpm x86_64: libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm libpng12-devel-1.2.50-7.el7_2.i686.rpm libpng12-devel-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: libpng12-1.2.50-7.el7_2.src.rpm x86_64: libpng12-1.2.50-7.el7_2.i686.rpm libpng12-1.2.50-7.el7_2.x86_64.rpm libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: libpng12-debuginfo-1.2.50-7.el7_2.i686.rpm libpng12-debuginfo-1.2.50-7.el7_2.x86_64.rpm libpng12-devel-1.2.50-7.el7_2.i686.rpm libpng12-devel-1.2.50-7.el7_2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-7981 https://access.redhat.com/security/cve/CVE-2015-8126 https://access.redhat.com/security/cve/CVE-2015-8472 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD4DBQFWaEOWXlSAg2UNWIIRArqQAJiXHpRTjePlByUwb2yeLtnA6ZHDAJ483rVP N/LWwsGEwId3XWZYVPOUSQ== =s2GT -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

Trust: 2.7

sources: NVD: CVE-2015-8472 // JVNDB: JVNDB-2015-006846 // BID: 78624 // VULHUB: VHN-86433 // VULMON: CVE-2015-8472 // PACKETSTORM: 135557 // PACKETSTORM: 135339 // PACKETSTORM: 135338 // PACKETSTORM: 134720 // PACKETSTORM: 134722 // PACKETSTORM: 134719 // PACKETSTORM: 135341

AFFECTED PRODUCTS

vendor:libpngmodel:libpngscope:eqversion:1.5.1

Trust: 1.9

vendor:libpngmodel:libpngscope:eqversion:1.4.17

Trust: 1.9

vendor:libpngmodel:libpngscope:eqversion:1.5.4

Trust: 1.9

vendor:libpngmodel:libpngscope:eqversion:1.5.5

Trust: 1.9

vendor:libpngmodel:libpngscope:eqversion:1.5.2

Trust: 1.9

vendor:libpngmodel:libpngscope:eqversion:1.5.6

Trust: 1.9

vendor:libpngmodel:libpngscope:eqversion:1.4.15

Trust: 1.6

vendor:libpngmodel:libpngscope:eqversion:1.4.16

Trust: 1.6

vendor:libpngmodel:libpngscope:eqversion:1.4.14

Trust: 1.6

vendor:libpngmodel:libpngscope:eqversion:1.5.3

Trust: 1.6

vendor:libpngmodel:libpngscope:eqversion:1.6.3

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.42

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.16

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.29

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.47

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.16

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.21

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.49

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.44

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.5

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.12

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.36

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.1

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.14

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.30

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.11

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.9

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.18

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.24

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.6

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.7

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.7

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.11

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.41

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.3

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.8

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.4

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.20

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.0

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.15

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.27

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.33

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.11

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.4

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.0

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.21

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.15

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.1

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.10

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.4

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.5

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.10

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.26

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.22

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.7

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.40

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.28

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.25

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.10

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.19

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.2

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.3

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.11

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.38

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.9

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.45

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.8

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.39

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.34

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.23

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.12

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.2

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.17

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.54

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.0.64

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.37

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.24

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.46

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.5.13

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.43

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.8

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.1

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.48

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.13

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.10

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.9

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.2

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.35

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.6.6

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.2.19

Trust: 1.3

vendor:libpngmodel:libpngscope:eqversion:1.4.0

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.22

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.6.12

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.15

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.2.52

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.4.13

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.2.32

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.23

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.2.31

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.4.12

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.17

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.20

Trust: 1.0

vendor:applemodel:mac os xscope:lteversion:10.11.3

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.6.18

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.14

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.19

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.6.17

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.2.51

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.16

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.6.13

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.5.18

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.2.50

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.2.53

Trust: 1.0

vendor:libpngmodel:libpngscope:eqversion:1.6.14

Trust: 1.0

vendor:oraclemodel:jre updatescope:eqversion:1.866

Trust: 0.9

vendor:oraclemodel:jdk updatescope:eqversion:1.866

Trust: 0.9

vendor:oraclemodel:jre updatescope:eqversion:1.865

Trust: 0.9

vendor:oraclemodel:jre updatescope:eqversion:1.791

Trust: 0.9

vendor:oraclemodel:jre updatescope:eqversion:1.6105

Trust: 0.9

vendor:oraclemodel:jdk updatescope:eqversion:1.865

Trust: 0.9

vendor:oraclemodel:jdk updatescope:eqversion:1.791

Trust: 0.9

vendor:oraclemodel:jdk updatescope:eqversion:1.6105

Trust: 0.9

vendor:png groupmodel:libpngscope:ltversion:1.6.x

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.9.5

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.11 to 10.11.3

Trust: 0.8

vendor:png groupmodel:libpngscope:eqversion:1.1.x

Trust: 0.8

vendor:png groupmodel:libpngscope:eqversion:1.5.25

Trust: 0.8

vendor:png groupmodel:libpngscope:eqversion:1.2.55

Trust: 0.8

vendor:oraclemodel:jdkscope:eqversion:7 update 91

Trust: 0.8

vendor:oraclemodel:jdkscope:eqversion:6 update 105

Trust: 0.8

vendor:oraclemodel:jrescope:eqversion:7 update 91

Trust: 0.8

vendor:oraclemodel:jrescope:eqversion:6 update 105

Trust: 0.8

vendor:png groupmodel:libpngscope:ltversion:1.5.x

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.10.5

Trust: 0.8

vendor:png groupmodel:libpngscope:eqversion:1.4.18

Trust: 0.8

vendor:png groupmodel:libpngscope:eqversion:1.6.20

Trust: 0.8

vendor:oraclemodel:java sescope:eqversion:embedded 8 update 65

Trust: 0.8

vendor:oraclemodel:jdkscope:eqversion:8 update 66

Trust: 0.8

vendor:oraclemodel:jrescope:eqversion:8 update 66

Trust: 0.8

vendor:png groupmodel:libpngscope:ltversion:1.4.x

Trust: 0.8

vendor:png groupmodel:libpngscope:ltversion:1.2.x

Trust: 0.8

vendor:png groupmodel:libpngscope:eqversion:1.3.x

Trust: 0.8

vendor:libpngmodel:libpngscope:eqversion:1.0.25

Trust: 0.3

vendor:redhatmodel:enterprise linux serverscope:eqversion:6

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.3.50

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:4.0.0.4

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.11

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.6.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.18

Trust: 0.3

vendor:ibmmodel:websphere real time sr8scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:8.0.1

Trust: 0.3

vendor:ibmmodel:powerkvmscope:eqversion:3.1

Trust: 0.3

vendor:ibmmodel:ilog optimization decision manager enterprisescope:eqversion:3.6

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.306

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.4.0.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.39

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.4

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.50

Trust: 0.3

vendor:ibmmodel:cognos business intelligence serverscope:eqversion:10.1.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.23

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.2.33

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:neversion:2.1.165.6

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.22

Trust: 0.3

vendor:ibmmodel:filenet system monitorscope:eqversion:4.5

Trust: 0.3

vendor:debianmodel:linux sparcscope:eqversion:6.0

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.6.3

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.31

Trust: 0.3

vendor:ibmmodel:websphere real timescope:eqversion:3.0

Trust: 0.3

vendor:ibmmodel:decision optimization centerscope:eqversion:3.8

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.11.2

Trust: 0.3

vendor:ibmmodel:websphere real time sr2scope:eqversion:3

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.6

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.5.1

Trust: 0.3

vendor:libpngmodel:libpngscope:neversion:1.4.18

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:8.0

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:eqversion:2.1.157

Trust: 0.3

vendor:ibmmodel:tivoli endpoint manager for remote controlscope:eqversion:8.2.1

Trust: 0.3

vendor:ibmmodel:tivoli composite application manager for transactionsscope:eqversion:7.4

Trust: 0.3

vendor:ibmmodel:tivoli network managerscope:eqversion:4.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.54

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.2.4

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.6

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:2.1.1.2

Trust: 0.3

vendor:ibmmodel:cognos business intelligence serverscope:eqversion:10.2.1

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.2.0

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.11.1

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:8.2

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.11.3

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.47

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.28

Trust: 0.3

vendor:ibmmodel:aixscope:eqversion:7.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.42

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.5

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.5

Trust: 0.3

vendor:ibmmodel:cognos business intelligence serverscope:eqversion:10.1

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.14

Trust: 0.3

vendor:ibmmodel:expeditorscope:eqversion:6.2.3

Trust: 0.3

vendor:ibmmodel:cognos metrics managerscope:eqversion:10.1

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.31

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.15

Trust: 0.3

vendor:ibmmodel:cognos metrics managerscope:eqversion:10.2

Trust: 0.3

vendor:ibmmodel:smartcloud provisioning for software virtual appliancescope:eqversion:2.1

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.0.11

Trust: 0.3

vendor:ibmmodel:tivoli network manager if0002 ip editioscope:neversion:4.2

Trust: 0.3

vendor:ibmmodel:cognos insightscope:eqversion:10.2.1

Trust: 0.3

vendor:redhatmodel:enterprise linux desktopscope:eqversion:6

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.1

Trust: 0.3

vendor:libpngmodel:libpngscope:neversion:1.0.65

Trust: 0.3

vendor:s u s emodel:opensusescope:eqversion:13.2

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.6.1

Trust: 0.3

vendor:redhatmodel:enterprise linux desktop supplementaryscope:eqversion:6

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.3.4

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.31

Trust: 0.3

vendor:ibmmodel:websphere real time sr6scope:eqversion:3

Trust: 0.3

vendor:redhatmodel:enterprise linux supplementary serverscope:eqversion:5

Trust: 0.3

vendor:ibmmodel:websphere real time sr9scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:powerkvm sp3scope:neversion:2.1.1

Trust: 0.3

vendor:ibmmodel:websphere real time sr4-fp2scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.0.13

Trust: 0.3

vendor:ibmmodel:fabric managerscope:eqversion:4.1

Trust: 0.3

vendor:debianmodel:linux ia-64scope:eqversion:6.0

Trust: 0.3

vendor:ibmmodel:powerkvmscope:eqversion:2.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.2

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:3.1.0.2

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.4

Trust: 0.3

vendor:ibmmodel:cognos insightscope:eqversion:10.2

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.3.2

Trust: 0.3

vendor:ibmmodel:ilog optimization decision manager enterprisescope:eqversion:3.5

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.2.8

Trust: 0.3

vendor:ibmmodel:security network protectionscope:eqversion:5.3.1

Trust: 0.3

vendor:ibmmodel:cognos business intelligence serverscope:eqversion:10.2.11

Trust: 0.3

vendor:redhatmodel:enterprise linux workstationscope:eqversion:6

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.27

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.13

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.2.3.3

Trust: 0.3

vendor:ibmmodel:tivoli network managerscope:eqversion:4.1.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.2.9

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.19

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.14

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:4.0

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.3.0

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.12

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.2.305

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.8

Trust: 0.3

vendor:libpngmodel:libpngscope:neversion:1.2.55

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:eqversion:3.12

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.3

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:4.0.0.2

Trust: 0.3

vendor:debianmodel:linux amd64scope:eqversion:6.0

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.303

Trust: 0.3

vendor:ibmmodel:cognos metrics managerscope:eqversion:10.1.1

Trust: 0.3

vendor:ibmmodel:cognos tm1scope:eqversion:10.1.0

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.6.0.1

Trust: 0.3

vendor:ibmmodel:ilog optimization decision manager enterprisescope:eqversion:3.4

Trust: 0.3

vendor:debianmodel:linux mipsscope:eqversion:6.0

Trust: 0.3

vendor:ibmmodel:expeditorscope:eqversion:6.2.2

Trust: 0.3

vendor:ibmmodel:cognos tm1scope:eqversion:10.2.2

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.2.32

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:0.90

Trust: 0.3

vendor:ibmmodel:security network protectionscope:eqversion:5.3.2

Trust: 0.3

vendor:ibmmodel:aixscope:eqversion:6.1

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.1.0

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.40

Trust: 0.3

vendor:ibmmodel:cognos metrics managerscope:eqversion:10.2.1

Trust: 0.3

vendor:ibmmodel:decision optimization centerscope:eqversion:3.7.0.2

Trust: 0.3

vendor:ibmmodel:tivoli network managerscope:eqversion:3.9

Trust: 0.3

vendor:ibmmodel:integration busscope:eqversion:9

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.59

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.2.7

Trust: 0.3

vendor:ibmmodel:websphere message broker toolkitscope:eqversion:8

Trust: 0.3

vendor:ibmmodel:integration busscope:eqversion:10

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.24

Trust: 0.3

vendor:redhatmodel:enterprise linux hpc node optionalscope:eqversion:6

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:8.2.1

Trust: 0.3

vendor:applemodel:mac osscope:neversion:x10.11.4

Trust: 0.3

vendor:redhatmodel:enterprise linux server supplementaryscope:eqversion:6

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.43

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.5.0.1

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.2.3.5

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.4.0.1

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.2.3.1

Trust: 0.3

vendor:ibmmodel:cognos business intelligence serverscope:eqversion:10.2.2

Trust: 0.3

vendor:ibmmodel:websphere real time sr7 fp1scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:3.1.0.1

Trust: 0.3

vendor:ibmmodel:aixscope:eqversion:5.3

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.6.3

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.0.10

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:3.1.2.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.2.6

Trust: 0.3

vendor:redhatmodel:enterprise linux workstation supplementaryscope:eqversion:6

Trust: 0.3

vendor:ibmmodel:fabric managerscope:neversion:4.1.04.0048

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.33

Trust: 0.3

vendor:redhatmodel:enterprise linux workstation optionalscope:eqversion:6

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.3.3

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.2.35

Trust: 0.3

vendor:ibmmodel:enterprise content management system monitorscope:eqversion:5.1

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.3.0.4

Trust: 0.3

vendor:ibmmodel:decision optimization centerscope:eqversion:3.7

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.56

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.41

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.2.3

Trust: 0.3

vendor:ibmmodel:websphere real time sr7scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.5

Trust: 0.3

vendor:ibmmodel:websphere real time sr fpscope:eqversion:3920

Trust: 0.3

vendor:ibmmodel:security identity governance and intelligencescope:eqversion:5.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.21

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.9

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.6.0.1

Trust: 0.3

vendor:libpngmodel:libpngscope:neversion:1.5.25

Trust: 0.3

vendor:ibmmodel:enterprise content management system monitorscope:eqversion:5.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.30

Trust: 0.3

vendor:applemodel:mac os security updatescope:neversion:x2016-0020

Trust: 0.3

vendor:ibmmodel:websphere real timescope:eqversion:2.0

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.0.12

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.1.1

Trust: 0.3

vendor:s u s emodel:opensusescope:eqversion:13.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.35

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:3.1

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.6

Trust: 0.3

vendor:ibmmodel:websphere real time srscope:eqversion:39

Trust: 0.3

vendor:susemodel:linux enterprise server sp4 ltssscope:eqversion:10

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.58

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.51

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.2.303

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.2.6

Trust: 0.3

vendor:debianmodel:linux s/390scope:eqversion:6.0

Trust: 0.3

vendor:libpngmodel:libpngscope:neversion:1.6.20

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2

Trust: 0.3

vendor:ibmmodel:forms viewerscope:eqversion:8.1

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.1.9

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.4.0

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.10.5

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.45

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.2

Trust: 0.3

vendor:ibmmodel:expeditorscope:eqversion:6.2.1

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.32

Trust: 0.3

vendor:debianmodel:linux armscope:eqversion:6.0

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.17

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.44

Trust: 0.3

vendor:ibmmodel:websphere real timescope:eqversion:3

Trust: 0.3

vendor:ibmmodel:websphere real time sr fpscope:neversion:3930

Trust: 0.3

vendor:ibmmodel:tivoli network managerscope:eqversion:3.8

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.34

Trust: 0.3

vendor:redhatmodel:enterprise linux server optionalscope:eqversion:6

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.1.8

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.46

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.3.0.1

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.7

Trust: 0.3

vendor:ibmmodel:websphere real time sr5scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:cognos tm1scope:eqversion:10.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.55

Trust: 0.3

vendor:ibmmodel:websphere real time sr8 fp10scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:eqversion:2.1.165.4

Trust: 0.3

vendor:susemodel:linux enterprise module for legacy softwarescope:eqversion:12

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.52

Trust: 0.3

vendor:ibmmodel:cplex enterprise serverscope:eqversion:12.5

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.4

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.9.5

Trust: 0.3

vendor:ibmmodel:decision optimization centerscope:eqversion:3.8.0.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.48

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.3.0.3

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.3

Trust: 0.3

vendor:ibmmodel:tivoli network managerscope:eqversion:4.1

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:eqversion:2.1.165.1

Trust: 0.3

vendor:ibmmodel:cognos metrics managerscope:eqversion:10.2.2

Trust: 0.3

vendor:ibmmodel:integration toolkitscope:eqversion:9

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.32

Trust: 0.3

vendor:centosmodel:centosscope:eqversion:6

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.2.5

Trust: 0.3

vendor:ibmmodel:cognos business intelligence serverscope:eqversion:10.2

Trust: 0.3

vendor:redhatmodel:enterprise linux desktop optionalscope:eqversion:6

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.29

Trust: 0.3

vendor:ibmmodel:tivoli composite application manager for transactionsscope:eqversion:7.3.0

Trust: 0.3

vendor:redhatmodel:enterprise linux hpc node supplementaryscope:eqversion:6

Trust: 0.3

vendor:redhatmodel:enterprise linux desktop supplementary clientscope:eqversion:5

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.26

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.11

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.57

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:eqversion:2.1.165.5

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:2.1

Trust: 0.3

vendor:ibmmodel:decision optimization centerscope:eqversion:3.6

Trust: 0.3

vendor:redhatmodel:enterprise linux hpc nodescope:eqversion:6

Trust: 0.3

vendor:ibmmodel:websphere message brokerscope:eqversion:8

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.38

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.5.1

Trust: 0.3

vendor:ibmmodel:websphere real time sr fpscope:eqversion:3810

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.2.5

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.37

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:3.1.2

Trust: 0.3

vendor:ibmmodel:aixscope:eqversion:7.1

Trust: 0.3

vendor:ibmmodel:tivoli common reportingscope:eqversion:2.1.1

Trust: 0.3

vendor:debianmodel:linux ia-32scope:eqversion:6.0

Trust: 0.3

vendor:ibmmodel:cognos insightscope:eqversion:10.2.2

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.16

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.53

Trust: 0.3

vendor:oraclemodel:linuxscope:eqversion:0

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.20

Trust: 0.3

vendor:libpngmodel:libpngscope:eqversion:1.0.10

Trust: 0.3

vendor:ibmmodel:ilog optimization decision manager enterprisescope:eqversion:3.7.0.2

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.3.0

Trust: 0.3

vendor:debianmodel:linux powerpcscope:eqversion:6.0

Trust: 0.3

vendor:ibmmodel:tivoli monitoring fix packscope:eqversion:6.302

Trust: 0.3

vendor:ibmmodel:websphere real time sr9 fp10scope:eqversion:3

Trust: 0.3

vendor:ibmmodel:viosscope:eqversion:2.2.1.3

Trust: 0.3

vendor:ibmmodel:tivoli monitoringscope:eqversion:6.2.3.4

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:neversion:3.13

Trust: 0.3

vendor:ibmmodel:powerkvm buildscope:eqversion:2.1.158

Trust: 0.3

vendor:ibmmodel:cplex optimization studioscope:eqversion:12.5.0.1

Trust: 0.3

sources: BID: 78624 // JVNDB: JVNDB-2015-006846 // CNNVD: CNNVD-201512-189 // NVD: CVE-2015-8472

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2015-8472
value: HIGH

Trust: 1.0

NVD: CVE-2015-8472
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201512-189
value: MEDIUM

Trust: 0.6

VULHUB: VHN-86433
value: HIGH

Trust: 0.1

VULMON: CVE-2015-8472
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2015-8472
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-86433
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2015-8472
baseSeverity: HIGH
baseScore: 7.3
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
exploitabilityScore: 3.9
impactScore: 3.4
version: 3.0

Trust: 1.8

sources: VULHUB: VHN-86433 // VULMON: CVE-2015-8472 // JVNDB: JVNDB-2015-006846 // CNNVD: CNNVD-201512-189 // NVD: CVE-2015-8472

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-86433 // JVNDB: JVNDB-2015-006846 // NVD: CVE-2015-8472

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201512-189

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201512-189

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2015-006846

EXPLOIT AVAILABILITY
sources:
            
            
            VULHUB: VHN-86433

PATCH
title:APPLE-SA-2016-03-21-5 OS X El Capitan 10.11.4 and Security Update 2016-002url:http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
Trust: 0.8
title:HT206167url:https://support.apple.com/en-us/HT206167
Trust: 0.8
title:HT206167url:https://support.apple.com/ja-jp/HT206167
Trust: 0.8
title:Text Form of Oracle Critical Patch Update - January 2016 Risk Matricesurl:http://www.oracle.com/technetwork/topics/security/cpujan2016verbose-2367956.html
Trust: 0.8
title:Oracle Critical Patch Update Advisory - January 2016url:http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
Trust: 0.8
title:January 2016 Critical Patch Update Releasedurl:https://blogs.oracle.com/security/entry/january_2016_critical_patch_update
Trust: 0.8
title:libpng10 / 1.0.65url:http://sourceforge.net/projects/libpng/files/libpng10/1.0.65/
Trust: 0.8
title:libpng12 / 1.2.55url:http://sourceforge.net/projects/libpng/files/libpng12/1.2.55/
Trust: 0.8
title:libpng14 / 1.4.18url:http://sourceforge.net/projects/libpng/files/libpng14/1.4.18/
Trust: 0.8
title:libpng15 / 1.5.25url:http://sourceforge.net/projects/libpng/files/libpng15/1.5.25/
Trust: 0.8
title:libpng16 / 1.6.20url:http://sourceforge.net/projects/libpng/files/libpng16/1.6.20/
Trust: 0.8
title:TLSA-2016-11url:http://www.turbolinux.co.jp/security/2016/TLSA-2016-11j.html
Trust: 0.8
title:Oracle Corporation Javaプラグインの脆弱性に関するお知らせurl:http://www.fmworld.net/biz/common/oracle/20160120.html
Trust: 0.8
title:libpng Buffer Overflow Vulnerability Fixurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=59039
Trust: 0.6
title:Red Hat: Moderate: libpng security updateurl:https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20152596 - Security Advisory
Trust: 0.1
title:Red Hat: Moderate: libpng12 security updateurl:https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20152595 - Security Advisory
Trust: 0.1
title:Red Hat: Moderate: libpng security updateurl:https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20152594 - Security Advisory
Trust: 0.1
title:Debian CVElist Bug Report Logs: libpng: CVE-2015-8540: read underflow in libpngurl:https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=0a130e26709c1ba00694161c08b9c604
Trust: 0.1
title:Ubuntu Security Notice: libpng vulnerabilitiesurl:https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-2861-1
Trust: 0.1
title:Debian CVElist Bug Report Logs: libpng: Incomplete fix for CVE-2015-8126url:https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=386e683fecec564e81371b5dca873869
Trust: 0.1
title:Debian Security Advisories: DSA-3443-1 libpng -- security updateurl:https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories&qid=57e4bc5fc071e2986f7cef65414ffe23
Trust: 0.1
title:Red Hat: CVE-2015-8472url:https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database&qid=CVE-2015-8472
Trust: 0.1
title:Amazon Linux AMI: ALAS-2015-615url:https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2015-615
Trust: 0.1
title:Apple: OS X El Capitan v10.11.4 and Security Update 2016-002url:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=ef054ba76412200e34091eb91c38c281
Trust: 0.1
title:Oracle Linux Bulletins: Oracle Linux Bulletin - October 2015url:https://vulmon.com/vendoradvisory?qidtp=oracle_linux_bulletins&qid=435ed9abc2fb1e74ce2a69605a01e326
Trust: 0.1
title:Oracle: Oracle Critical Patch Update Advisory - January 2016url:https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=63802a6c83b107c4e6e0c7f9241a66a8
Trust: 0.1
title:IBM: Security Bulletin: Multiple vulnerabilities in IBM Java affect IBM Netezza Analytics for NPSurl:https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog&qid=c36fc403a4c2c6439b732d2fca738f58
Trust: 0.1
title:clair-laburl:https://github.com/sjourdan/clair-lab 
Trust: 0.1
sources:
            
            
            VULMON: CVE-2015-8472 // 
            
            
            
            JVNDB: JVNDB-2015-006846 // 
            
            
            
            CNNVD: CNNVD-201512-189

EXTERNAL IDS
db:NVDid:CVE-2015-8472
Trust: 3.6
db:BIDid:78624
Trust: 1.5
db:OPENWALLid:OSS-SECURITY/2015/12/03/6
Trust: 1.2
db:MCAFEEid:SB10148
Trust: 1.2
db:JVNid:JVNVU97668313
Trust: 0.8
db:JVNDBid:JVNDB-2015-006846
Trust: 0.8
db:CNNVDid:CNNVD-201512-189
Trust: 0.7
db:PACKETSTORMid:135153
Trust: 0.1
db:PACKETSTORMid:135265
Trust: 0.1
db:PACKETSTORMid:134874
Trust: 0.1
db:VULHUBid:VHN-86433
Trust: 0.1
db:VULMONid:CVE-2015-8472
Trust: 0.1
db:PACKETSTORMid:135557
Trust: 0.1
db:PACKETSTORMid:135339
Trust: 0.1
db:PACKETSTORMid:135338
Trust: 0.1
db:PACKETSTORMid:134720
Trust: 0.1
db:PACKETSTORMid:134722
Trust: 0.1
db:PACKETSTORMid:134719
Trust: 0.1
db:PACKETSTORMid:135341
Trust: 0.1
sources:
            
            
            VULHUB: VHN-86433 // 
            
            
            
            VULMON: CVE-2015-8472 // 
            
            
            
            BID: 78624 // 
            
            
            
            JVNDB: JVNDB-2015-006846 // 
            
            
            
            PACKETSTORM: 135557 // 
            
            
            
            PACKETSTORM: 135339 // 
            
            
            
            PACKETSTORM: 135338 // 
            
            
            
            PACKETSTORM: 134720 // 
            
            
            
            PACKETSTORM: 134722 // 
            
            
            
            PACKETSTORM: 134719 // 
            
            
            
            PACKETSTORM: 135341 // 
            
            
            
            CNNVD: CNNVD-201512-189 // 
            
            
            
            NVD: CVE-2015-8472

REFERENCES
url:http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
Trust: 1.5
url:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
Trust: 1.5
url:http://www.securityfocus.com/bid/78624
Trust: 1.3
url:http://rhn.redhat.com/errata/rhsa-2015-2594.html
Trust: 1.3
url:http://rhn.redhat.com/errata/rhsa-2015-2595.html
Trust: 1.3
url:http://rhn.redhat.com/errata/rhsa-2015-2596.html
Trust: 1.3
url:http://rhn.redhat.com/errata/rhsa-2016-0055.html
Trust: 1.3
url:http://rhn.redhat.com/errata/rhsa-2016-0056.html
Trust: 1.3
url:http://rhn.redhat.com/errata/rhsa-2016-0057.html
Trust: 1.3
url:http://lists.apple.com/archives/security-announce/2016/mar/msg00004.html
Trust: 1.2
url:http://sourceforge.net/projects/libpng/files/libpng10/1.0.65/
Trust: 1.2
url:http://sourceforge.net/projects/libpng/files/libpng12/1.2.55/
Trust: 1.2
url:http://sourceforge.net/projects/libpng/files/libpng14/1.4.18/
Trust: 1.2
url:http://sourceforge.net/projects/libpng/files/libpng15/1.5.25/
Trust: 1.2
url:http://sourceforge.net/projects/libpng/files/libpng16/1.6.20/
Trust: 1.2
url:https://support.apple.com/ht206167
Trust: 1.2
url:http://www.debian.org/security/2016/dsa-3443
Trust: 1.2
url:http://lists.fedoraproject.org/pipermail/package-announce/2016-january/174936.html
Trust: 1.2
url:http://lists.fedoraproject.org/pipermail/package-announce/2016-january/175073.html
Trust: 1.2
url:http://lists.fedoraproject.org/pipermail/package-announce/2016-january/174905.html
Trust: 1.2
url:http://www.openwall.com/lists/oss-security/2015/12/03/6
Trust: 1.2
url:https://access.redhat.com/errata/rhsa-2016:1430
Trust: 1.2
url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html
Trust: 1.2
url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html
Trust: 1.2
url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html
Trust: 1.2
url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html
Trust: 1.2
url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html
Trust: 1.2
url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html
Trust: 1.2
url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html
Trust: 1.2
url:http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html
Trust: 1.2
url:https://kc.mcafee.com/corporate/index?page=content&id=sb10148
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-8472
Trust: 0.8
url:https://www.ipa.go.jp/security/ciadr/vul/20160120-jre.html
Trust: 0.8
url:http://www.jpcert.or.jp/at/2016/at160005.html
Trust: 0.8
url:http://jvn.jp/vu/jvnvu97668313
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-8472
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2015-8472
Trust: 0.7
url:https://access.redhat.com/security/cve/cve-2015-8126
Trust: 0.7
url:https://nvd.nist.gov/vuln/detail/cve-2015-8126
Trust: 0.7
url:https://access.redhat.com/articles/11258
Trust: 0.7
url:https://access.redhat.com/security/team/contact/
Trust: 0.7
url:https://www.redhat.com/mailman/listinfo/rhsa-announce
Trust: 0.7
url:https://bugzilla.redhat.com/):
Trust: 0.7
url:https://access.redhat.com/security/team/key/
Trust: 0.7
url:https://access.redhat.com/security/cve/cve-2015-8472
Trust: 0.7
url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-affect-ibm-netezza-analytics/
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-affect-ibm-netezza-analytics-for-nps/
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-jre-8-0-1-1-affect-ibm-netezza-platform-software-clients/
Trust: 0.6
url:https://access.redhat.com/security/cve/cve-2016-0448
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2016-0448
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2016-0466
Trust: 0.4
url:https://access.redhat.com/security/cve/cve-2016-0483
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2016-0483
Trust: 0.4
url:https://access.redhat.com/security/cve/cve-2016-0402
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2016-0494
Trust: 0.4
url:https://access.redhat.com/security/cve/cve-2016-0466
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2016-0402
Trust: 0.4
url:https://access.redhat.com/security/cve/cve-2016-0494
Trust: 0.4
url:http://www.libpng.org/pub/png/libpng.html
Trust: 0.3
url:http://seclists.org/oss-sec/2015/q4/428
Trust: 0.3
url:http://aix.software.ibm.com/aix/efixes/security/java_jan2016_advisory.asc
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=isg3t1023374
Trust: 0.3
url: https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5099293
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21982337
Trust: 0.3
url:http://www.ibm.com/support/docview.wss?uid=swg21979528
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21978310
Trust: 0.3
url:http://www.ibm.com/support/docview.wss?uid=swg21979761
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21973231
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21974194
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21975785
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21975835
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21975904
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21975929
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21975930
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21976631
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21976779
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21976855
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21976924
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21977053
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg21983487
Trust: 0.3
url:https://www-01.ibm.com/support/docview.wss?uid=swg21984483
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg2c1000115
Trust: 0.3
url:https://access.redhat.com/security/updates/classification/#critical
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2015-7575
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2015-7575
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2015-7981
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2015-7981
Trust: 0.3
url:http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#appendixjava
Trust: 0.3
url:https://access.redhat.com/security/updates/classification/#moderate
Trust: 0.3
url:https://kc.mcafee.com/corporate/index?page=content&amp;id=sb10148
Trust: 0.1
url:https://cwe.mitre.org/data/definitions/119.html
Trust: 0.1
url:https://access.redhat.com/errata/rhsa-2015:2596
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:https://usn.ubuntu.com/2861-1/
Trust: 0.1
url:http://tools.cisco.com/security/center/viewalert.x?alertid=43094
Trust: 0.1
url:https://rhn.redhat.com/errata/rhsa-2016-0099.html
Trust: 0.1
url:http://www.ibm.com/developerworks/java/jdk/alerts/
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2015-5041
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2015-8540
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2015-8540
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2015-5041
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2016-0475
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2016-0475
Trust: 0.1
url:https://access.redhat.com/security/updates/classification/#important
Trust: 0.1
sources:
            
            
            VULHUB: VHN-86433 // 
            
            
            
            VULMON: CVE-2015-8472 // 
            
            
            
            BID: 78624 // 
            
            
            
            JVNDB: JVNDB-2015-006846 // 
            
            
            
            PACKETSTORM: 135557 // 
            
            
            
            PACKETSTORM: 135339 // 
            
            
            
            PACKETSTORM: 135338 // 
            
            
            
            PACKETSTORM: 134720 // 
            
            
            
            PACKETSTORM: 134722 // 
            
            
            
            PACKETSTORM: 134719 // 
            
            
            
            PACKETSTORM: 135341 // 
            
            
            
            CNNVD: CNNVD-201512-189 // 
            
            
            
            NVD: CVE-2015-8472

CREDITS
Glenn Randers-Pehrson
Trust: 0.9
sources:
            
            
            BID: 78624 // 
            
            
            
            CNNVD: CNNVD-201512-189

SOURCES
db:VULHUBid:VHN-86433
db:VULMONid:CVE-2015-8472
db:BIDid:78624
db:JVNDBid:JVNDB-2015-006846
db:PACKETSTORMid:135557
db:PACKETSTORMid:135339
db:PACKETSTORMid:135338
db:PACKETSTORMid:134720
db:PACKETSTORMid:134722
db:PACKETSTORMid:134719
db:PACKETSTORMid:135341
db:CNNVDid:CNNVD-201512-189
db:NVDid:CVE-2015-8472

LAST UPDATE DATE
2024-11-11T22:54:21.077000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-86433date:2017-11-04T00:00:00
db:VULMONid:CVE-2015-8472date:2017-11-04T00:00:00
db:BIDid:78624date:2016-08-02T17:01:00
db:JVNDBid:JVNDB-2015-006846date:2016-05-31T00:00:00
db:CNNVDid:CNNVD-201512-189date:2021-05-18T00:00:00
db:NVDid:CVE-2015-8472date:2017-11-04T01:29:12.600

SOURCES RELEASE DATE
db:VULHUBid:VHN-86433date:2016-01-21T00:00:00
db:VULMONid:CVE-2015-8472date:2016-01-21T00:00:00
db:BIDid:78624date:2015-12-03T00:00:00
db:JVNDBid:JVNDB-2015-006846date:2016-01-27T00:00:00
db:PACKETSTORMid:135557date:2016-02-02T16:44:12
db:PACKETSTORMid:135339date:2016-01-21T14:47:36
db:PACKETSTORMid:135338date:2016-01-21T14:47:29
db:PACKETSTORMid:134720date:2015-12-10T00:39:58
db:PACKETSTORMid:134722date:2015-12-10T00:40:23
db:PACKETSTORMid:134719date:2015-12-10T00:39:51
db:PACKETSTORMid:135341date:2016-01-21T14:47:53
db:CNNVDid:CNNVD-201512-189date:2015-12-10T00:00:00
db:NVDid:CVE-2015-8472date:2016-01-21T15:59:00.117