CVE-2011-2501: canonical ubuntu_linux Out-of-bounds Read
Vulnerability summary
CVE-2011-2501 is a medium (CVSS 6.5) Out-of-bounds Read vulnerability in canonical ubuntu_linux. EPSS estimates a 3.48% chance of exploitation in the next 30 days, higher than 89.1% of scored vulnerabilities. 1 public exploit is recorded.
Not severe (CVSS 6.5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 3 · Related 1Timeline
- 17-07-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.48%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
No change 0.00 pp
From 3.48% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (sourceforge.net)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Canonical1 product
- ubuntu_linuxEOL8.04 | 10.04 | 10.10 | 11.04
Debian1 product
- debian_linuxEOL5.0 | 6.0
Fedoraproject1 product
- fedoraEOL14
Libpng1 product
- libpng≥ 1.0.0, < 1.0.55 | ≥ 1.2.0, < 1.2.45 | ≥ 1.4.0, < 1.4.8 | ≥ 1.5.0, < 1.5.4
4 vendors · 4 products
References
24 links- libpng.git.sourceforge.net/git/…X Refsource CONFIRM
- www.mandriva.com/security/advisories?name=MDVSA-2011:151Vendor AdvisoryX Refsource MANDRIVABroken Link
- bugzilla.redhat.com/show_bug.cgi?id=717084X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
- slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.617466Vendor AdvisoryX Refsource SLACKWAREMailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2011/06/27/13Mailing ListX Refsource MLISTPatchThird Party Advisory
Show all 24 references
- lists.fedoraproject.org/pipermail/package-announce/2011-July/062720.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2011/06/28/16Mailing ListX Refsource MLISTPatchThird Party Advisory
