VDB

GCVE-110-MAGEIA-2014-76

GCVE-110-MAGEIA-2014-76
Advisory Published
Vulnetix · Advisory published February 16, 2014
The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PLTE chunk of zero bytes or a NULL palette, related to pngrtran.c and pngset.c (CVE-2013-6954).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageialibpng120 (affected), 1.2.50-4.1.mga4 (unaffected), 0 (affected), 1.2.50-4.1.mga4 (unaffected)—
Mageiarsync0 (affected), 3.1.0-4.1.mga4 (unaffected)—

Aliases

CVE-2013-6954

References

Updated libpng12 package fixes security vulnerability
advisory
Updated libpng12 package fixes security vulnerability
issue
Updated libpng12 package fixes security vulnerability
issue
Updated rsync package fixes socket activation
advisory
Updated rsync package fixes socket activation
issue

Browse GCVE Records

73,393 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›