Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-27818
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Libpng Pngcheck 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Libpng Pngcheck是Libpng组织的一个用C编写的基于检查内部32位CRC、aka校验和并解压缩图像数据的验证PNG，JNG和MNG文件完整性的软件。 pngcheck-2.4.0 存在安全漏洞，该漏洞源于check_chunk_name()函数发现了一个缺陷。攻击者可利用该漏洞可以传递一个恶意文件，由pngcheck处理，可以导致暂时拒绝服务，对应用程序可用性构成低风险。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
-pngcheck pngcheck-2.4.0 -
II. Public POCs for CVE-2020-27818
#POC DescriptionSource LinkShenlong Link
1Research and verification of vulnerabilities in pngcheck, including CVE-2020-27818, CVE-2020-35511 and other bugs found in version 2.4.0.https://github.com/13m0n4de/pngcheck-vulnsPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2020-27818
Please Login to view more intelligence information
New Vulnerabilities
Product: pngcheck
Vendor: n/a
Same weakness: CWE-120
V. Comments for CVE-2020-27818

No comments yet

Leave a comment