Search for packages
| purl | pkg:nuget/libpng@1.6.7 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-731z-2fss-aaaq
Aliases: CVE-2013-6954 |
Uncontrolled Resource Consumption The png_do_expand_palette function in libpng allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c. |
Affected by 5 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:46:05.337076+00:00 | GitLab Importer | Affected by | VCID-731z-2fss-aaaq | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libpng/CVE-2013-6954.yml | 34.0.1 |
| 2024-01-03T18:07:25.926540+00:00 | GitLab Importer | Affected by | VCID-731z-2fss-aaaq | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libpng/CVE-2013-6954.yml | 34.0.0rc1 |