NVD脆弱性詳細

CVE-2015-8126

概要	Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.
公表日	2015年11月13日12:59
登録日	2021年1月26日14:57
最終更新日	2024年11月21日11:38

CVSS2.0 : HIGH
スコア	7.5
ベクター	AV:N/AC:L/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:libpng:libpng::::::::	1.6.0			1.6.19
cpe:2.3:a:libpng:libpng::::::::	1.5.0			1.5.24
cpe:2.3:a:libpng:libpng::::::::	1.3.0			1.4.17
cpe:2.3:a:libpng:libpng::::::::	1.1.1			1.2.54
cpe:2.3:a:libpng:libpng::::::::				1.0.64

構成2	以上	以下	より上	未満
cpe:2.3:o:fedoraproject:fedora:22:::::::*
cpe:2.3:o:fedoraproject:fedora:23:::::::*
cpe:2.3:o:fedoraproject:fedora:21:::::::*

構成3	以上	以下	より上	未満
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3::::::
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4::::::
cpe:2.3:o:suse:linux_enterprise_server:12:sp1::::::
cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1::::::
cpe:2.3:o:opensuse:leap:42.1:::::::*
cpe:2.3:o:opensuse:opensuse:13.1:::::::*
cpe:2.3:o:opensuse:opensuse:13.2:::::::*
cpe:2.3:o:suse:linux_enterprise_server:12:-::::::
cpe:2.3:o:suse:linux_enterprise_desktop:12:-::::::

構成4	以上	以下	より上	未満
cpe:2.3:o:debian:debian_linux:8.0:::::::*
cpe:2.3:o:debian:debian_linux:7.0:::::::*
cpe:2.3:o:debian:debian_linux:9.0:::::::*

構成5	以上	以下	より上	未満
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:::::::*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::*
cpe:2.3:a:redhat:satellite:5.7:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:::::::*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:6.7:::::::*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:7.3:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:7.4:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:7.5:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:7.6:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:7.2:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:7.7:::::::*

構成6		以上	以下	より上	未満
cpe:2.3:a:redhat:satellite:5.6:::::::*
実行環境
1	cpe:2.3:o:redhat:enterprise_linux:5.0:::::::*
2	cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*

構成7	以上	以下	より上	未満
cpe:2.3:o:oracle:solaris:11.3:::::::*
cpe:2.3:o:oracle:linux:6:-::::::
cpe:2.3:o:oracle:linux:7:-::::::
cpe:2.3:a:oracle:jdk:1.8.0:update65::::::
cpe:2.3:a:oracle:jdk:1.8.0:update66::::::
cpe:2.3:a:oracle:jdk:1.6.0:update105::::::
cpe:2.3:a:oracle:jdk:1.7.0:update91::::::
cpe:2.3:a:oracle:jre:1.6.0:update105::::::
cpe:2.3:a:oracle:jre:1.7.0:update91::::::
cpe:2.3:a:oracle:jre:1.8.0:update66::::::
cpe:2.3:a:oracle:jre:1.8.0:update65::::::

構成8		以上	以下	より上	未満
cpe:2.3:o:apple:mac_os_x::::::::					10.11.4

構成9	以上	以下	より上	未満
cpe:2.3:o:canonical:ubuntu_linux:15.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:15.04:::::::*
cpe:2.3:o:canonical:ubuntu_linux:12.04::::esm:::
cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm:::

関連情報、対策とツール

No	URL	タグ
1	http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html	Third Party Advisory
2	http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html	Third Party Advisory
3	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	Mailing List Third Party Advisory
4	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	Mailing List Third Party Advisory
5	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172324.html	Third Party Advisory
6	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172324.html	Third Party Advisory
7	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172620.html	Third Party Advisory
8	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172620.html	Third Party Advisory
9	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172647.html	Third Party Advisory
10	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172647.html	Third Party Advisory
11	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172663.html	Third Party Advisory
12	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172663.html	Third Party Advisory
13	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172769.html	Third Party Advisory
14	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172769.html	Third Party Advisory
15	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172797.html	Third Party Advisory
16	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172797.html	Third Party Advisory
17	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172823.html	Third Party Advisory
18	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172823.html	Third Party Advisory
19	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177344.html	Third Party Advisory
20	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177344.html	Third Party Advisory
21	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177382.html	Third Party Advisory
22	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177382.html	Third Party Advisory
23	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174905.html	Third Party Advisory
24	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174905.html	Third Party Advisory
25	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174936.html	Third Party Advisory
26	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174936.html	Third Party Advisory
27	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175073.html	Third Party Advisory
28	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175073.html	Third Party Advisory
29	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00033.html	Mailing List Third Party Advisory
30	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00033.html	Mailing List Third Party Advisory
31	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00034.html	Mailing List Third Party Advisory
32	http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00034.html	Mailing List Third Party Advisory
33	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html	Mailing List Third Party Advisory
34	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html	Mailing List Third Party Advisory
35	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html	Mailing List Third Party Advisory
36	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html	Mailing List Third Party Advisory
37	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html	Mailing List Third Party Advisory
38	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html	Mailing List Third Party Advisory
39	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html	Mailing List Third Party Advisory
40	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html	Mailing List Third Party Advisory
41	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html	Mailing List Third Party Advisory
42	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html	Mailing List Third Party Advisory
43	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html	Mailing List Third Party Advisory
44	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html	Mailing List Third Party Advisory
45	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html	Mailing List Third Party Advisory
46	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html	Mailing List Third Party Advisory
47	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html	Mailing List Third Party Advisory
48	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html	Mailing List Third Party Advisory
49	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html	Mailing List Third Party Advisory
50	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00014.html	Mailing List Third Party Advisory
51	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html	Mailing List Third Party Advisory
52	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00015.html	Mailing List Third Party Advisory
53	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html	Mailing List Third Party Advisory
54	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00018.html	Mailing List Third Party Advisory
55	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html	Mailing List Third Party Advisory
56	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00028.html	Mailing List Third Party Advisory
57	http://lists.opensuse.org/opensuse-updates/2015-11/msg00159.html	Mailing List Third Party Advisory
58	http://lists.opensuse.org/opensuse-updates/2015-11/msg00159.html	Mailing List Third Party Advisory
59	http://lists.opensuse.org/opensuse-updates/2015-11/msg00160.html	Mailing List Third Party Advisory
60	http://lists.opensuse.org/opensuse-updates/2015-11/msg00160.html	Mailing List Third Party Advisory
61	http://lists.opensuse.org/opensuse-updates/2015-12/msg00062.html	Mailing List Third Party Advisory
62	http://lists.opensuse.org/opensuse-updates/2015-12/msg00062.html	Mailing List Third Party Advisory
63	http://lists.opensuse.org/opensuse-updates/2015-12/msg00063.html	Mailing List Third Party Advisory
64	http://lists.opensuse.org/opensuse-updates/2015-12/msg00063.html	Mailing List Third Party Advisory
65	http://lists.opensuse.org/opensuse-updates/2016-01/msg00028.html	Mailing List Third Party Advisory
66	http://lists.opensuse.org/opensuse-updates/2016-01/msg00028.html	Mailing List Third Party Advisory
67	http://lists.opensuse.org/opensuse-updates/2016-01/msg00029.html	Mailing List Third Party Advisory
68	http://lists.opensuse.org/opensuse-updates/2016-01/msg00029.html	Mailing List Third Party Advisory
69	http://lists.opensuse.org/opensuse-updates/2016-01/msg00030.html	Mailing List Third Party Advisory
70	http://lists.opensuse.org/opensuse-updates/2016-01/msg00030.html	Mailing List Third Party Advisory
71	http://rhn.redhat.com/errata/RHSA-2015-2594.html	Third Party Advisory
72	http://rhn.redhat.com/errata/RHSA-2015-2594.html	Third Party Advisory
73	http://rhn.redhat.com/errata/RHSA-2015-2595.html	Third Party Advisory
74	http://rhn.redhat.com/errata/RHSA-2015-2595.html	Third Party Advisory
75	http://rhn.redhat.com/errata/RHSA-2015-2596.html	Third Party Advisory
76	http://rhn.redhat.com/errata/RHSA-2015-2596.html	Third Party Advisory
77	http://rhn.redhat.com/errata/RHSA-2016-0055.html	Third Party Advisory
78	http://rhn.redhat.com/errata/RHSA-2016-0055.html	Third Party Advisory
79	http://rhn.redhat.com/errata/RHSA-2016-0056.html	Third Party Advisory
80	http://rhn.redhat.com/errata/RHSA-2016-0056.html	Third Party Advisory
81	http://rhn.redhat.com/errata/RHSA-2016-0057.html	Third Party Advisory
82	http://rhn.redhat.com/errata/RHSA-2016-0057.html	Third Party Advisory
83	http://www.debian.org/security/2015/dsa-3399	Third Party Advisory
84	http://www.debian.org/security/2015/dsa-3399	Third Party Advisory
85	http://www.debian.org/security/2016/dsa-3507	Third Party Advisory
86	http://www.debian.org/security/2016/dsa-3507	Third Party Advisory
87	http://www.openwall.com/lists/oss-security/2015/11/12/2	Mailing List Third Party Advisory
88	http://www.openwall.com/lists/oss-security/2015/11/12/2	Mailing List Third Party Advisory
89	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	Third Party Advisory
90	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	Third Party Advisory
91	http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html	Third Party Advisory
92	http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html	Third Party Advisory
93	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	Third Party Advisory
94	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	Third Party Advisory
95	http://www.securityfocus.com/bid/77568	Third Party Advisory VDB Entry
96	http://www.securityfocus.com/bid/77568	Third Party Advisory VDB Entry
97	http://www.securitytracker.com/id/1034142	Third Party Advisory VDB Entry
98	http://www.securitytracker.com/id/1034142	Third Party Advisory VDB Entry
99	http://www.ubuntu.com/usn/USN-2815-1	Third Party Advisory
100	http://www.ubuntu.com/usn/USN-2815-1	Third Party Advisory
101	https://access.redhat.com/errata/RHSA-2016:1430	Third Party Advisory
102	https://access.redhat.com/errata/RHSA-2016:1430	Third Party Advisory
103	https://code.google.com/p/chromium/issues/detail?id=560291	Issue Tracking Patch Third Party Advisory
104	https://code.google.com/p/chromium/issues/detail?id=560291	Issue Tracking Patch Third Party Advisory
105	https://kc.mcafee.com/corporate/index?page=content&id=SB10148	Third Party Advisory
106	https://kc.mcafee.com/corporate/index?page=content&id=SB10148	Third Party Advisory
107	https://security.gentoo.org/glsa/201603-09	Third Party Advisory
108	https://security.gentoo.org/glsa/201603-09	Third Party Advisory
109	https://security.gentoo.org/glsa/201611-08	Third Party Advisory
110	https://security.gentoo.org/glsa/201611-08	Third Party Advisory
111	https://support.apple.com/HT206167	Third Party Advisory
112	https://support.apple.com/HT206167	Third Party Advisory

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-120	古典的バッファオーバーフロー	https://cwe.mitre.org/data/definitions/120.html

JVN脆弱性情報

libpng の png_set_PLTE および png_get_PLTE 関数におけるバッファオーバーフローの脆弱性

タイトル	libpng の png_set_PLTE および png_get_PLTE 関数におけるバッファオーバーフローの脆弱性
概要	ibpng の (1) png_set_PLTE および (2) png_get_PLTE 関数には、バッファオーバーフローの脆弱性が存在します。
想定される影響	第三者により、PNG 画像の IHDR (別名イメージヘッダ) チャンクの過度に小さな bit-depth 値を介して、サービス運用妨害 (アプリケーションクラッシュ) 状態にされるなど、不特定の影響を受ける可能性があります。
対策	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
公表日	2015年11月12日0:00
登録日	2015年11月16日14:27
最終更新日	2016年5月31日12:02

影響を受けるシステム

オラクル

JDK 6 Update 105

JDK 7 Update 91

JDK 8 Update 66

JRE 6 Update 105

JRE 7 Update 91

JRE 8 Update 66

Oracle Java SE Embedded 8 Update 65

アップル

Apple Mac OS X 10.10.5

Apple Mac OS X 10.11 から 10.11.3

日立

Cosminexus Developer's Kit for Java(TM)

Hitachi Application Server

Hitachi Application Server for Developers

Hitachi Developer's Kit for Java

uCosminexus Application Server -R

uCosminexus Application Server Express

uCosminexus Application Server Light

uCosminexus Application Server Standard-R

uCosminexus Application Server Enterprise

uCosminexus Application Server Smart Edition

uCosminexus Application Server Standard

uCosminexus Client

uCosminexus Client for Plug-in

uCosminexus Developer 01

uCosminexus Developer Professional

uCosminexus Developer Professional for Plug-in

uCosminexus Developer Light

uCosminexus Developer Standard

uCosminexus Operator

uCosminexus Primary Server Base

uCosminexus Server Standard-R

uCosminexus Service Architect

uCosminexus Service Platform

uCosminexus Service Platform - Messaging

PNG Development Group

libpng 1.0.64 未満

libpng 1.1.x

libpng 1.2.54 未満の 1.2.x

libpng 1.3.x

libpng 1.4.17 未満の 1.4.x

libpng 1.5.24 未満の 1.5.x

libpng 1.6.19 未満の 1.6.x

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-8126	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8126
National Vulnerability Database (NVD)
2	CVE-2015-8126	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8126

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	名前	URL
Apple Mailing Lists
1	APPLE-SA-2016-03-21-5 OS X El Capitan 10.11.4 and Security Update 2016-002	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
Apple Security Updates
2	HT206167	https://support.apple.com/en-us/HT206167
Apple セキュリティアップデート
3	HT206167	https://support.apple.com/ja-jp/HT206167
Chromium
4	Issue 560291	https://bugs.chromium.org/p/chromium/issues/detail?id=560291
Google
5	Stable Channel Update	http://googlechromereleases.blogspot.jp/2016/03/stable-channel-update.html
Hitachi Software Vulnerability Information
6	HS16-003	http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS16-003/index.html
libpng
7	Top Page	http://www.libpng.org/pub/png/libpng.html
Oracle Critical Patch Update
8	Oracle Critical Patch Update Advisory - January 2016	http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
9	Text Form of Oracle Critical Patch Update - January 2016 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujan2016verbose-2367956.html
SECURITY BLOG
10	January 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/january_2016_critical_patch_update
SourceForge
11	Top Page	http://libpng.sourceforge.net/
Turbolinux Security Advisory
12	TLSA-2016-11	http://www.turbolinux.co.jp/security/2016/TLSA-2016-11j.html
ソフトウェア製品セキュリティ情報
13	HS16-003	http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS16-003/index.html
富士通セキュリティ情報
14	Oracle Corporation Javaプラグインの脆弱性に関するお知らせ	http://www.fmworld.net/biz/common/oracle/20160120.html

その他

No	名前	URL
IPA 重要なセキュリティ情報
1	Oracle Java の脆弱性対策について(CVE-2016-0494等)	https://www.ipa.go.jp/security/ciadr/vul/20160120-jre.html
JPCERT 注意喚起
2	JPCERT-AT-2016-0005	http://www.jpcert.or.jp/at/2016/at160005.html
JVN
3	JVNVU#97668313	http://jvn.jp/vu/JVNVU97668313
関連文書
4	CVE request: libpng buffer overflow in png_set_PLTE	http://www.openwall.com/lists/oss-security/2015/11/12/2

変更履歴

No	変更内容	変更日
0	[2015年11月16日] 掲載 [2016年01月28日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - January 2016 Risk Matrices) を追加ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - January 2016) を追加ベンダ情報：オラクル (January 2016 Critical Patch Update Released) を追加ベンダ情報：富士通 (Oracle Corporation Javaプラグインの脆弱性に関するお知らせ) を追加参考情報：IPA 重要なセキュリティ情報 (Oracle Java の脆弱性対策について(CVE-2016-0494等) を追加参考情報：JPCERT 注意喚起 (JPCERT-AT-2016-0005) を追加 [2016年02月15日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：日立 (HS16-003) を追加 [2016年03月29日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：アップル (HT206167) を追加ベンダ情報：アップル (APPLE-SA-2016-03-21-5 OS X El Capitan 10.11.4 and Security Update 2016-002) を追加参考情報：JVN (JVNVU#97668313) を追加 [2016年03月31日] ベンダ情報：Google (Issue 560291) を追加ベンダ情報：Google (Stable Channel Update) を追加 [2016年05月31日] ベンダ情報：ターボリナックス (TLSA-2016-11) を追加	2018年2月17日10:37

構成3	以上	以下	より上	未満
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3::::::
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4::::::
cpe:2.3:o:suse:linux_enterprise_server:12:sp1::::::
cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1::::::
cpe:2.3:o:opensuse:leap:42.1:::::::*
cpe:2.3:o:opensuse:opensuse:13.1:::::::*
cpe:2.3:o:opensuse:opensuse:13.2:::::::*
cpe:2.3:o:suse:linux_enterprise_server:12:-::::::
cpe:2.3:o:suse:linux_enterprise_desktop:12:-::::::

構成5	以上	以下	より上	未満
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:::::::*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::*
cpe:2.3:a:redhat:satellite:5.7:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:::::::*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:6.7:::::::*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:7.3:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:7.4:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:7.5:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:7.6:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:7.2:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:::::::*
cpe:2.3:o:redhat:enterprise_linux_eus:7.7:::::::*

構成7	以上	以下	より上	未満
cpe:2.3:o:oracle:solaris:11.3:::::::*
cpe:2.3:o:oracle:linux:6:-::::::
cpe:2.3:o:oracle:linux:7:-::::::
cpe:2.3:a:oracle:jdk:1.8.0:update65::::::
cpe:2.3:a:oracle:jdk:1.8.0:update66::::::
cpe:2.3:a:oracle:jdk:1.6.0:update105::::::
cpe:2.3:a:oracle:jdk:1.7.0:update91::::::
cpe:2.3:a:oracle:jre:1.6.0:update105::::::
cpe:2.3:a:oracle:jre:1.7.0:update91::::::
cpe:2.3:a:oracle:jre:1.8.0:update66::::::
cpe:2.3:a:oracle:jre:1.8.0:update65::::::