遠端 CentOS Linux 7 主機上安裝的套件受到 CESA-2020: 3901 公告中提及的一個弱點影響。

  - libpng：未針對使用者限制檢查區塊的長度 (CVE-2017-12652)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端主機上安裝的測試產品版本比測試版本舊。因此，會受到 ALAS2-2020-1528 公告中提及的一個弱點影響。

  - 1.6.32 版之前的 libpng 未對照使用者限制正確檢查區塊長度。(CVE-2017-12652)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 7 主機上安裝的套件受到 RHSA-2020: 3901 公告中提及的一個弱點影響。

  - libpng：未針對使用者限制檢查區塊的長度 (CVE-2017-12652)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

An update of the syslinux package has been released.

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - libpng before 1.6.32 does not properly check the length     of chunks against the user limit.(CVE-2017-12652)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libpng package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The png_set_text_2 function in libpng 0.71 before     1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x     before 1.5.28, and 1.6.x before 1.6.27 allows     context-dependent attackers to cause a NULL pointer     dereference vectors involving loading a text chunk into     a png structure, removing the text, and then adding     another text chunk to the structure.(CVE-2016-10087)

  - ** RESERVED ** This candidate has been reserved by an     organization or individual that will use it when     announcing a new security problem. When the candidate     has been publicized, the details for this candidate     will be provided.(CVE-2017-12652)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3901 advisory.

  - libpng before 1.6.32 does not properly check the length of chunks against the user limit. (CVE-2017-12652)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1528 advisory.

  - libpng before 1.6.32 does not properly check the length of chunks against the user limit. (CVE-2017-12652)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3901 advisory.

    The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics     (PNG) image format files.

    Security Fix(es):

    * libpng: does not check length of chunks against user limit (CVE-2017-12652)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
164584	Nutanix AOS：多個弱點 (NXSA-AOS-5.19.1)	Nessus	Misc.	2022/9/1	2024/5/1	critical
141614	CentOS 7：libpng (CESA-2020: 3901)	Nessus	CentOS Local Security Checks	2020/10/20	2024/10/9	critical
141951	Amazon Linux 2：libpng (ALAS-2020-1528)	Nessus	Amazon Linux Local Security Checks	2020/10/27	2020/10/27	critical
143089	RHEL 7：libpng (RHSA-2020: 3901)	Nessus	Red Hat Local Security Checks	2020/11/19	2024/6/4	critical
164584	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.1)	Nessus	Misc.	2022/9/1	2024/5/1	critical
203638	Photon OS 4.0: Syslinux PHSA-2023-4.0-0415	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	critical
128835	EulerOS 2.0 SP5 : libpng (EulerOS-SA-2019-1912)	Nessus	Huawei Local Security Checks	2019/9/16	2024/4/25	critical
128954	EulerOS Virtualization for ARM 64 3.0.2.0 : libpng (EulerOS-SA-2019-1951)	Nessus	Huawei Local Security Checks	2019/9/17	2024/4/25	critical
141614	CentOS 7 : libpng (RHSA-2020:3901)	Nessus	CentOS Local Security Checks	2020/10/20	2024/10/9	critical
141951	Amazon Linux 2 : libpng (ALAS-2020-1528)	Nessus	Amazon Linux Local Security Checks	2020/10/27	2020/10/27	critical
143089	RHEL 7 : libpng (RHSA-2020:3901)	Nessus	Red Hat Local Security Checks	2020/11/19	2024/6/4	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical