There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based
    buffer overflow in the function get_token in pnm2png.c in pnm2png. (CVE-2018-14550)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to
    the recommended error handling for png_read_image. (CVE-2018-14048)

  - An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based
    buffer overflow in the function get_token in pnm2png.c in pnm2png. (CVE-2018-14550)

  - png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function
    is called under png_safe_execute. (CVE-2019-7317)

远程主机受到 GLSA-201908-02 中所述漏洞的影响（libpng：多个漏洞）在 libpng 中发现多个漏洞。请检查下面供参考的 CVE 标识符以了解详细信息。影响：诱骗用户处理特制 PNG 文件的远程攻击者可能会造成拒绝服务情况。解决方法：目前无任何已知的解决方法。

为 Slackware 14.2 和当前版本提供了用于修复安全问题的新 libpng 程序包。

遠端主機受到 GLSA-201908-02 中所述的弱點影響 (libpng：多個弱點) 在 libpng 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。影響：誘騙使用者處理特製 PNG 檔案的遠端攻擊者可能會造成拒絕服務情況。因應措施：目前尚無已知的因應措施。

現已提供適用於 Slackware 14.2 和最新版本的新 libpng 套件，可修正多個安全性問題。

リモートホストは、GLSA-201908-02（libpng：複数の脆弱性）で説明されている脆弱性に影響されています。複数の脆弱性がlibpngで発見されています。詳細については、以下に記載されているCVE識別番号を参照してください。影響：リモートの攻撃者が、ユーザーを誘導して特別に細工されたPNGファイルを処理させることで、サービス拒否状態が引き起こされる可能性があります。回避策：現時点では、既知の回避策はありません。

セキュリティ問題を修正する新しいlibpngパッケージが、Slackware 14.2およびcurrentで利用可能です。

An update of the syslinux package has been released.

The remote host is affected by the vulnerability described in GLSA-201908-02 (libpng: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libpng. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, by enticing a user to process a specially crafted PNG       file, could cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

According to the version of the libpng package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - An issue has been found in third-party PNM decoding     associated with libpng 1.6.35. It is a stack-based     buffer overflow in the function get_token in pnm2png.c     in pnm2png.(CVE-2018-14550)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New libpng packages are available for Slackware 14.2 and -current to fix security issues.

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An issue has been found in third-party PNM decoding     associated with libpng 1.6.35. It is a stack-based     buffer overflow in the function get_token in pnm2png.c     in pnm2png.(CVE-2018-14550)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
418388	SCA: security update for libpng (GHSA-qwwr-qc2p-6283)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	high
424044	Alpine: multiple libpng packages: security update to 1.6.37-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
418388	SCA: security update for libpng (GHSA-qwwr-qc2p-6283)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	high
424044	Alpine: multiple libpng packages: security update to 1.6.37-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
127560	GLSA-201908-02：libpng：多个漏洞	Nessus	Gentoo Local Security Checks	2019/8/12	2024/5/7	high
124140	Slackware 14.2 / 最新：libpng (SSA:2019-107-01)	Nessus	Slackware Local Security Checks	2019/4/18	2024/6/3	high
127560	GLSA-201908-02：libpng：多個弱點	Nessus	Gentoo Local Security Checks	2019/8/12	2024/5/7	high
124140	Slackware 14.2 / 最新：libpng (SSA:2019-107-01)	Nessus	Slackware Local Security Checks	2019/4/18	2024/6/3	high
127560	GLSA-201908-02：libpng：複数の脆弱性	Nessus	Gentoo Local Security Checks	2019/8/12	2024/5/7	high
124140	Slackware 14.2/current：libpng（SSA：2019-107-01）	Nessus	Slackware Local Security Checks	2019/4/18	2024/6/3	high
203638	Photon OS 4.0: Syslinux PHSA-2023-4.0-0415	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	critical
127560	GLSA-201908-02 : libpng: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2019/8/12	2024/5/7	high
132832	EulerOS Virtualization for ARM 64 3.0.5.0 : libpng (EulerOS-SA-2020-1078)	Nessus	Huawei Local Security Checks	2020/1/13	2024/4/1	high
124140	Slackware 14.2 / current : libpng (SSA:2019-107-01)	Nessus	Slackware Local Security Checks	2019/4/18	2024/6/3	high
204258	Photon OS 5.0: Syslinux PHSA-2023-5.0-0033	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	critical
132608	EulerOS 2.0 SP8 : libpng (EulerOS-SA-2020-1015)	Nessus	Huawei Local Security Checks	2020/1/2	2024/4/1	high
204103	Photon OS 3.0: Syslinux PHSA-2023-3.0-0602	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	critical

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

critical

high

high

high

critical

high

critical