Description

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

Remediation

References

CVE-2018-13785

Related Vulnerabilities

PostgreSQL Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-3393)

OpenSSL NULL Pointer Dereference Vulnerability (CVE-2004-0079)

MySQL CVE-2021-2339 Vulnerability (CVE-2021-2339)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.6)

Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2008-2364)

Severity

Medium

Classification

CVE-2018-13785 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities