CVE-2018-14550 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-14550 Interim 1 36 2025-11-05T03:26:26Z current 2021-05-30T14:15:30Z 2025-11-05T03:26:26Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-14550 An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Container as a Service Platform 1.0 SUSE Container as a Service Platform 2.0 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP3 libpng-devel libpng-devel-32bit libpng12 libpng12-0 libpng12-0-32bit libpng12-compat-devel libpng12-devel libpng15 libpng15-15 libpng16 libpng16-16 libpng16-16-1.6.40-150600.1.3 libpng16-16-1.6.43-1.1 libpng16-16-1.6.43-slfo.1.1_1.2 libpng16-16-1.6.44-160000.2.2 libpng16-16-32bit libpng16-16-32bit-1.6.40-150600.1.3 libpng16-16-x86-64-v3-1.6.44-160000.2.2 libpng16-compat-devel libpng16-compat-devel-1.6.40-150600.1.3 libpng16-compat-devel-1.6.44-160000.2.2 libpng16-compat-devel-x86-64-v3-1.6.44-160000.2.2 libpng16-devel libpng16-devel-1.6.40-150600.1.3 libpng16-devel-1.6.44-160000.2.2 libpng16-devel-x86-64-v3-1.6.44-160000.2.2 libpng16-tools-1.6.44-160000.2.2 libpng16-16-1.6.40-150600.1.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libpng16-16-32bit-1.6.40-150600.1.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libpng16-compat-devel-1.6.40-150600.1.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libpng16-devel-1.6.40-150600.1.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libpng16-16-1.6.40-150600.1.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libpng16-16-32bit-1.6.40-150600.1.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libpng16-compat-devel-1.6.40-150600.1.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libpng16-devel-1.6.40-150600.1.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libpng16-16-1.6.44-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libpng16-16-x86-64-v3-1.6.44-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libpng16-compat-devel-1.6.44-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libpng16-compat-devel-x86-64-v3-1.6.44-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libpng16-devel-1.6.44-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libpng16-devel-x86-64-v3-1.6.44-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libpng16-tools-1.6.44-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libpng16-16-1.6.43-1.1 as a component of SUSE Linux Micro 6.0 libpng16-16-1.6.43-slfo.1.1_1.2 as a component of SUSE Linux Micro 6.1 libpng16 as a component of SUSE Container as a Service Platform 1.0 libpng16 as a component of SUSE Container as a Service Platform 2.0 libpng12-0 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpng12-0-32bit as a component of SUSE Linux Enterprise Desktop 12 SP3 libpng12 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpng15-15 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpng15 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpng16-16 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpng16-16-32bit as a component of SUSE Linux Enterprise Desktop 12 SP3 libpng16 as a component of SUSE Linux Enterprise Desktop 12 SP3 libpng12-0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libpng12-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libpng12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libpng16-16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libpng16-16-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libpng16-compat-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libpng16-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libpng16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libpng16-16 as a component of SUSE Linux Enterprise Micro 5.0 libpng16 as a component of SUSE Linux Enterprise Micro 5.0 libpng16-16 as a component of SUSE Linux Enterprise Micro 5.1 libpng16 as a component of SUSE Linux Enterprise Micro 5.1 libpng12-0 as a component of SUSE Linux Enterprise Module for Basesystem 15 libpng12-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 libpng12 as a component of SUSE Linux Enterprise Module for Basesystem 15 libpng16-16 as a component of SUSE Linux Enterprise Module for Basesystem 15 libpng16-16-32bit as a component of SUSE Linux Enterprise Module for Basesystem 15 libpng16-compat-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 libpng16-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 libpng16 as a component of SUSE Linux Enterprise Module for Basesystem 15 libpng12-0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libpng12-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libpng12 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libpng16-16 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libpng16-16-32bit as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libpng16-compat-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libpng16-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libpng16 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libpng12-0 as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata libpng12-0 as a component of SUSE Linux Enterprise Server 11 SP3 LTSS libpng12-0 as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata libpng12-0 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libpng12-0-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libpng12-0 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libpng12-0-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libpng12 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libpng15-15 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libpng15 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libpng16-16 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libpng16-16-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libpng16 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libpng12-0 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libpng12-0-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libpng12 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libpng15-15 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libpng15 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libpng16-16 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libpng16-16-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libpng16 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libpng12-0 as a component of SUSE Linux Enterprise Server 12 SP3 libpng12-0-32bit as a component of SUSE Linux Enterprise Server 12 SP3 libpng12 as a component of SUSE Linux Enterprise Server 12 SP3 libpng15-15 as a component of SUSE Linux Enterprise Server 12 SP3 libpng15 as a component of SUSE Linux Enterprise Server 12 SP3 libpng16-16 as a component of SUSE Linux Enterprise Server 12 SP3 libpng16-16-32bit as a component of SUSE Linux Enterprise Server 12 SP3 libpng16 as a component of SUSE Linux Enterprise Server 12 SP3 libpng12-0 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libpng12-0-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libpng12 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libpng15-15 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libpng15 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libpng16-16 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libpng16-16-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libpng16 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libpng12-0 as a component of SUSE Linux Enterprise Server 12-LTSS libpng12-0-32bit as a component of SUSE Linux Enterprise Server 12-LTSS libpng12 as a component of SUSE Linux Enterprise Server 12-LTSS libpng16-16 as a component of SUSE Linux Enterprise Server 12-LTSS libpng16-16-32bit as a component of SUSE Linux Enterprise Server 12-LTSS libpng16 as a component of SUSE Linux Enterprise Server 12-LTSS libpng-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libpng-devel-32bit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libpng12-0 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libpng12-compat-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libpng12-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libpng12 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libpng16-compat-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libpng16-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libpng16 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png. CVE-2018-14550 SUSE Linux Enterprise Module for Basesystem 15 SP6:libpng16-16-1.6.40-150600.1.3 SUSE Linux Enterprise Module for Basesystem 15 SP6:libpng16-16-32bit-1.6.40-150600.1.3 SUSE Linux Enterprise Module for Basesystem 15 SP6:libpng16-compat-devel-1.6.40-150600.1.3 SUSE Linux Enterprise Module for Basesystem 15 SP6:libpng16-devel-1.6.40-150600.1.3 SUSE Linux Enterprise Module for Basesystem 15 SP7:libpng16-16-1.6.40-150600.1.3 SUSE Linux Enterprise Module for Basesystem 15 SP7:libpng16-16-32bit-1.6.40-150600.1.3 SUSE Linux Enterprise Module for Basesystem 15 SP7:libpng16-compat-devel-1.6.40-150600.1.3 SUSE Linux Enterprise Module for Basesystem 15 SP7:libpng16-devel-1.6.40-150600.1.3 SUSE Linux Enterprise Server 16.0:libpng16-16-1.6.44-160000.2.2 SUSE Linux Enterprise Server 16.0:libpng16-16-x86-64-v3-1.6.44-160000.2.2 SUSE Linux Enterprise Server 16.0:libpng16-compat-devel-1.6.44-160000.2.2 SUSE Linux Enterprise Server 16.0:libpng16-compat-devel-x86-64-v3-1.6.44-160000.2.2 SUSE Linux Enterprise Server 16.0:libpng16-devel-1.6.44-160000.2.2 SUSE Linux Enterprise Server 16.0:libpng16-devel-x86-64-v3-1.6.44-160000.2.2 SUSE Linux Enterprise Server 16.0:libpng16-tools-1.6.44-160000.2.2 SUSE Linux Micro 6.0:libpng16-16-1.6.43-1.1 SUSE Linux Micro 6.1:libpng16-16-1.6.43-slfo.1.1_1.2 SUSE Container as a Service Platform 1.0:libpng16 SUSE Container as a Service Platform 2.0:libpng16 SUSE Linux Enterprise Desktop 12 SP3:libpng12 SUSE Linux Enterprise Desktop 12 SP3:libpng12-0 SUSE Linux Enterprise Desktop 12 SP3:libpng12-0-32bit SUSE Linux Enterprise Desktop 12 SP3:libpng15 SUSE Linux Enterprise Desktop 12 SP3:libpng15-15 SUSE Linux Enterprise Desktop 12 SP3:libpng16 SUSE Linux Enterprise Desktop 12 SP3:libpng16-16 SUSE Linux Enterprise Desktop 12 SP3:libpng16-16-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpng12 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpng12-0 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpng12-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpng16 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpng16-16 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpng16-16-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpng16-compat-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpng16-devel SUSE Linux Enterprise Micro 5.0:libpng16 SUSE Linux Enterprise Micro 5.0:libpng16-16 SUSE Linux Enterprise Micro 5.1:libpng16 SUSE Linux Enterprise Micro 5.1:libpng16-16 SUSE Linux Enterprise Module for Basesystem 15 SP3:libpng12 SUSE Linux Enterprise Module for Basesystem 15 SP3:libpng12-0 SUSE Linux Enterprise Module for Basesystem 15 SP3:libpng12-devel SUSE Linux Enterprise Module for Basesystem 15 SP3:libpng16 SUSE Linux Enterprise Module for Basesystem 15 SP3:libpng16-16 SUSE Linux Enterprise Module for Basesystem 15 SP3:libpng16-16-32bit SUSE Linux Enterprise Module for Basesystem 15 SP3:libpng16-compat-devel SUSE Linux Enterprise Module for Basesystem 15 SP3:libpng16-devel SUSE Linux Enterprise Module for Basesystem 15:libpng12 SUSE Linux Enterprise Module for Basesystem 15:libpng12-0 SUSE Linux Enterprise Module for Basesystem 15:libpng12-devel SUSE Linux Enterprise Module for Basesystem 15:libpng16 SUSE Linux Enterprise Module for Basesystem 15:libpng16-16 SUSE Linux Enterprise Module for Basesystem 15:libpng16-16-32bit SUSE Linux Enterprise Module for Basesystem 15:libpng16-compat-devel SUSE Linux Enterprise Module for Basesystem 15:libpng16-devel SUSE Linux Enterprise Server 11 SP1 for Teradata:libpng12-0 SUSE Linux Enterprise Server 11 SP3 LTSS:libpng12-0 SUSE Linux Enterprise Server 11 SP3 for Teradata:libpng12-0 SUSE Linux Enterprise Server 11 SP4-LTSS:libpng12-0 SUSE Linux Enterprise Server 11 SP4-LTSS:libpng12-0-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:libpng12 SUSE Linux Enterprise Server 12 SP1-LTSS:libpng12-0 SUSE Linux Enterprise Server 12 SP1-LTSS:libpng12-0-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:libpng15 SUSE Linux Enterprise Server 12 SP1-LTSS:libpng15-15 SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16 SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16 SUSE Linux Enterprise Server 12 SP1-LTSS:libpng16-16-32bit SUSE Linux Enterprise Server 12 SP2-LTSS:libpng12 SUSE Linux Enterprise Server 12 SP2-LTSS:libpng12-0 SUSE Linux Enterprise Server 12 SP2-LTSS:libpng12-0-32bit SUSE Linux Enterprise Server 12 SP2-LTSS:libpng15 SUSE Linux Enterprise Server 12 SP2-LTSS:libpng15-15 SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16 SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16 SUSE Linux Enterprise Server 12 SP2-LTSS:libpng16-16-32bit SUSE Linux Enterprise Server 12 SP3:libpng12 SUSE Linux Enterprise Server 12 SP3:libpng12-0 SUSE Linux Enterprise Server 12 SP3:libpng12-0-32bit SUSE Linux Enterprise Server 12 SP3:libpng15 SUSE Linux Enterprise Server 12 SP3:libpng15-15 SUSE Linux Enterprise Server 12 SP3:libpng16 SUSE Linux Enterprise Server 12 SP3:libpng16-16 SUSE Linux Enterprise Server 12 SP3:libpng16-16-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:libpng12 SUSE Linux Enterprise Server 12 SP4-LTSS:libpng12-0 SUSE Linux Enterprise Server 12 SP4-LTSS:libpng12-0-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:libpng15 SUSE Linux Enterprise Server 12 SP4-LTSS:libpng15-15 SUSE Linux Enterprise Server 12 SP4-LTSS:libpng16 SUSE Linux Enterprise Server 12 SP4-LTSS:libpng16-16 SUSE Linux Enterprise Server 12 SP4-LTSS:libpng16-16-32bit SUSE Linux Enterprise Server 12-LTSS:libpng12 SUSE Linux Enterprise Server 12-LTSS:libpng12-0 SUSE Linux Enterprise Server 12-LTSS:libpng12-0-32bit SUSE Linux Enterprise Server 12-LTSS:libpng16 SUSE Linux Enterprise Server 12-LTSS:libpng16-16 SUSE Linux Enterprise Server 12-LTSS:libpng16-16-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:libpng-devel SUSE Linux Enterprise Software Development Kit 11 SP4:libpng-devel-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:libpng12-0 SUSE Linux Enterprise Software Development Kit 12 SP3:libpng12 SUSE Linux Enterprise Software Development Kit 12 SP3:libpng12-compat-devel SUSE Linux Enterprise Software Development Kit 12 SP3:libpng12-devel SUSE Linux Enterprise Software Development Kit 12 SP3:libpng16 SUSE Linux Enterprise Software Development Kit 12 SP3:libpng16-compat-devel SUSE Linux Enterprise Software Development Kit 12 SP3:libpng16-devel moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H