An issue was discovered in libjpeg 9a. The get_text_rgb_row function in rdppm.c allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade turbojpegUpgrade libjpeg-turbo-develUpgrade libjpeg-turboUpgrade libjpeg-turbo-staticUpgrade libjpeg-turbo-debuginfoUpgrade libjpeg-turbo-utilsUpgrade turbojpeg-devel | Apr 27, 2020 | May 16, 2018 |
| Amazon_linux | — | Upgrade libjpeg-turbo | Sep 19, 2019 | May 16, 2018 |
| Centos_linux | — | Upgrade libjpeg-turbo-debuginfoUpgrade libjpeg-turbo-staticUpgrade libjpeg-turbo-utilsUpgrade libjpeg-turboUpgrade turbojpeg-develUpgrade turbojpegUpgrade libjpeg-turbo-devel | Aug 28, 2019 | May 16, 2018 |
| Debian | — | Upgrade libjpeg-turbo | Feb 20, 2019 | May 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libjpeg-turbo-develUpgrade libjpeg-turbo | Nov 19, 2019 | May 16, 2018 |
| Oracle_linux | — | Upgrade libjpeg-turbo-develUpgrade turbojpegUpgrade libjpeg-turboUpgrade libjpeg-turbo-staticUpgrade turbojpeg-develUpgrade libjpeg-turbo-utils | Jul 21, 2020 | May 16, 2018 |
| Redhat_linux | — | Upgrade libjpeg-turboUpgrade turbojpeg-develUpgrade libjpeg-turbo-debuginfoUpgrade libjpeg-turbo-utilsUpgrade libjpeg-turbo-staticNo solution existsUpgrade libjpeg-turbo-develUpgrade turbojpeg | Aug 7, 2019 | May 16, 2018 |
| Ubuntu | — | Upgrade libjpeg62 (Ubuntu Pro)Upgrade libjpeg9 (Ubuntu Pro)Upgrade libjpeg-progs (Ubuntu Pro)Upgrade libjpeg-turbo8 | Jul 12, 2018 | May 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub