The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1424 advisory.

    This advisory aggregates security fixes for the libpng SRPM in CIQ LTS 9.2. It addresses 31 CVEs:
    CVE-2025-64720, CVE-2025-65018, CVE-2025-66293, CVE-2026-34757, CVE-2025-64505, and 26 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A Libpng Security Advisory reports :

A grayscale PNG image with a malformed (bad CRC) tRNS chunk will crash some libpng applications.

This vulnerability could be used to crash a browser when a user tries to view such a malformed PNG file. It is not known whether the vulnerability could be exploited otherwise.

Applications using libpng can crash if libpng is ask to process a grayscale image with a malformed (bad CRC) tRNS chunk. (CVE-2007-2445)

SunOS 5.10_x86: libpng Patch.
Date this patch was last updated by Sun : Jul/18/12

Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The libpng package contains a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files.

A flaw was found in the handling of malformed images in libpng. An attacker could create a carefully crafted PNG image file in such a way that it could cause an application linked with libpng to crash when the file was manipulated. (CVE-2007-2445)

A flaw was found in the sPLT chunk handling code in libpng. An attacker could create a carefully crafted PNG image file in such a way that it could cause an application linked with libpng to crash when the file was opened. (CVE-2006-5793)

Users of libpng should update to these updated packages which contain backported patches to correct these issues.

Red Hat would like to thank Glenn Randers-Pehrson, Mats Palmgren, and Tavis Ormandy for supplying details and patches for these issues.

GNOME 2.0.0: libpng Patch.
Date this patch was last updated by Sun : Mar/19/12

The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.

This update to libpng 1.0.26 resolves this problem.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201412-11 (AMD64 x86 emulation base libraries: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in AMD64 x86 emulation       base libraries. Please review the CVE identifiers referenced below for       details.
  Impact :

    A context-dependent attacker may be able to execute arbitrary code,       cause a Denial of Service condition, or obtain sensitive information.
  Workaround :

    There is no known workaround at this time.

SunOS 5.10: libpng Patch.
Date this patch was last updated by Sun : Jul/18/12

SunOS 5.10_x86: libpng Patch.
Date this patch was last updated by Sun : Jul/17/17

Multiple vulnerabilities have been identified in libgd2, a library for programmatic graphics creation and manipulation. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-2445     Grayscale PNG files containing invalid tRNS chunk CRC     values could cause a denial of service (crash), if a     maliciously crafted image is loaded into an application     using libgd.

  - CVE-2007-3476     An array indexing error in libgd's GIF handling could     induce a denial of service (crash with heap corruption)     if exceptionally large color index values are supplied     in a maliciously crafted GIF image file.

  - CVE-2007-3477     The imagearc() and imagefilledarc() routines in libgd     allow an attacker in control of the parameters used to     specify the degrees of arc for those drawing functions     to perform a denial of service attack (excessive CPU     consumption).

  - CVE-2007-3996     Multiple integer overflows exist in libgd's image     resizing and creation routines; these weaknesses allow     an attacker in control of the parameters passed to those     routines to induce a crash or execute arbitrary code     with the privileges of the user running an application     or interpreter linked against libgd2.

A flaw was found in the handling of malformed images in libpng. An attacker could create a carefully crafted PNG image file in such a way that it could cause an application linked with libpng to crash when the file was manipulated. (CVE-2007-2445)

A flaw was found in the sPLT chunk handling code in libpng. An attacker could create a carefully crafted PNG image file in such a way that it could cause an application linked with libpng to crash when the file was opened. (CVE-2006-5793)

SunOS 5.10: libpng Patch.
Date this patch was last updated by Sun : Jul/17/17

SunOS 5.10_x86: libpng Patch.
Date this patch was last updated by Sun : Jun/15/17

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1653 advisory.

    This advisory aggregates security fixes for the libpng SRPM in CIQ LTS 8.6. It addresses 20 CVEs:
    CVE-2026-22801, CVE-2007-2445, CVE-2007-5269, CVE-2008-1382, CVE-2008-3964, and 15 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
356085	Rocky Linux 9.2 [CIQ] Security Update: libpng / libpng-devel Multiple Vulnerabilities (ciqsa-2026_1424)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
25261	FreeBSD : png -- DoS crash vulnerability (4cb9c513-03ef-11dc-a51d-0019b95d4f14)	Nessus	FreeBSD Local Security Checks	2007/5/20	2021/1/6	medium
27331	openSUSE 10 Security Update : libpng (libpng-3739)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	medium
107981	Solaris 10 (x86) : 137081-07	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/22	high
25256	CentOS 3 / 4 / 5 : libpng (CESA-2007:0356)	Nessus	CentOS Local Security Checks	2007/5/20	2021/1/4	medium
25269	RHEL 2.1 / 3 / 4 / 5 : libpng (RHSA-2007:0356)	Nessus	Red Hat Local Security Checks	2007/5/20	2021/1/14	medium
23367	Solaris 8 (sparc) : 114816-04	Nessus	Solaris Local Security Checks	2006/11/6	2021/1/14	medium
62266	Fedora 7 : libpng10-1.0.26-1.fc7.1 (2007-0004)	Nessus	Fedora Local Security Checks	2012/9/24	2021/1/11	medium
79964	GLSA-201412-11 : AMD64 x86 emulation base libraries: Multiple vulnerabilities (Heartbleed)	Nessus	Gentoo Local Security Checks	2014/12/15	2022/5/5	critical
107483	Solaris 10 (sparc) : 137080-07	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/24	high
107983	Solaris 10 (x86) : 137081-10	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/22	high
27330	openSUSE 10 Security Update : libpng (libpng-3479)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	medium
33552	Debian DSA-1613-1 : libgd2 - multiple vulnerabilities	Nessus	Debian Local Security Checks	2008/7/23	2021/1/4	medium
60184	Scientific Linux Security Update : libpng on SL5.x, SL4.x, SL3.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
107485	Solaris 10 (sparc) : 137080-10	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/24	high
107982	Solaris 10 (x86) : 137081-09	Nessus	Solaris Local Security Checks	2018/3/12	2025/10/22	high
369917	Rocky Linux 8.6 [CIQ] Security Update: libpng / libpng-devel Multiple Vulnerabilities (ciqsa-2026_1653)	Nessus	Rocky Linux Local Security Checks	2026/10/21	2026/10/21	critical

检测

插件搜索

high

medium

medium

high

medium

medium

medium

medium

critical

high

high

medium

medium

medium

high

high

critical