CVE-2011-2692: canonical ubuntu_linux

Modified

AliasesRHSA-2011:1103

Published 17-07-2011Last modified 06-08-2024

Vulnerability summary

CVE-2011-2692 is a high (CVSS 8.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 4.23% chance of exploitation in the next 30 days, higher than 91% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritisepublic exploit

Public exploit (reference, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

8.8/10

010

High · v3.1 (NVD)

EPSS score

4.23%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 4 · Related 1

DSA-2287-1 OPENSUSE-SU-2024:10050-1 RHSA-2011:1104 RHSA-2011:1105

Timeline

17-07-2011
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted PNG image that triggers the reading of uninitialized memory.

CVSS metrics

2 scores · 1 source · 2 versions

v3.18.8v2.06.8

EPSS trend

Probability

4.23%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

No change 0.00 pp

From 4.23% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (sourceforge.net)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat6 products

libpng< 2:1.2.7-8.el4
libpng-debuginfo< 2:1.2.7-8.el4
libpng-devel< 2:1.2.7-8.el4
libpng10< 0:1.0.16-9.el4
libpng10-debuginfo< 0:1.0.16-9.el4

Show all 6

Canonical1 product

ubuntu_linuxEOL8.04 | 10.04 | 10.10 | 11.04

Debian1 product

debian_linuxEOL5.0 | 6.0

Fedoraproject1 product

fedoraEOL14

Libpng1 product

libpng≥ 1.0.0, < 1.0.55 | ≥ 1.2.0, < 1.2.45 | ≥ 1.4.0, < 1.4.8 | ≥ 1.5.0, < 1.5.4

5 vendors · 10 products

References

34 links

secunia.com/advisories/49660Third Party AdvisoryX Refsource SECUNIABroken Link
www.redhat.com/support/errata/RHSA-2011-1103.htmlVendor AdvisoryX Refsource REDHATBroken Link
www.securityfocus.com/bid/48618VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/45046Third Party AdvisoryX Refsource SECUNIABroken Link
www.ubuntu.com/usn/USN-1175-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2011:151Vendor AdvisoryX Refsource MANDRIVABroken Link
bugzilla.redhat.com/show_bug.cgi?id=720612X Refsource CONFIRMIssue TrackingPatchThird Party AdvisoryREPORT
sourceforge.net/mailarchive/…X Refsource CONFIRMExploitIssue TrackingThird Party Advisory
security.gentoo.org/glsa/glsa-201206-15.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/45461Third Party AdvisoryX Refsource SECUNIABroken Link

Show all 34 references

www.libpng.org/pub/png/libpng.htmlX Refsource CONFIRMProductVendor Advisory
libpng.git.sourceforge.net/git/…X Refsource CONFIRM
lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
www.debian.org/security/2011/dsa-2287Vendor AdvisoryX Refsource DEBIANThird Party Advisory
lists.apple.com/archives/Security-announce/2011//Oct/msg00003.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
secunia.com/advisories/45405Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/45445Third Party AdvisoryX Refsource SECUNIABroken Link
www.redhat.com/support/errata/RHSA-2011-1105.htmlVendor AdvisoryX Refsource REDHATBroken Link
secunia.com/advisories/45460Third Party AdvisoryX Refsource SECUNIABroken Link
www.openwall.com/lists/oss-security/2011/07/13/2Mailing ListX Refsource MLISTThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/68536VDB EntryX Refsource XFThird Party Advisory
support.apple.com/kb/HT5002X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/45492Third Party AdvisoryX Refsource SECUNIABroken Link
support.apple.com/kb/HT5281X Refsource CONFIRMThird Party Advisory
www.redhat.com/support/errata/RHSA-2011-1104.htmlVendor AdvisoryX Refsource REDHATBroken Link
www.kb.cert.org/vuls/id/819894Third Party AdvisoryX Refsource CERT VNUS Government Resource
lists.apple.com/archives/security-announce/2012/May/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
secunia.com/advisories/45415Third Party AdvisoryX Refsource SECUNIABroken Link
access.redhat.com/errata/RHSA-2011:1103Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1103.jsonAdvisory
access.redhat.com/security/cve/CVE-2011-2692REPORT
www.cve.org/CVERecord?id=CVE-2011-2692Advisory
nvd.nist.gov/vuln/detail/CVE-2011-2692Advisory